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(57)Abstract: 

PROBLEM TO BE SOLVED: To freely distribute contents and allow only authorized 

users to utilize the contents. 

SOLUTION: A client receives an encrypted content from a content server. The header of 
the content includes license-identifying information for identifying a license required in 
utihzation of the content. The client requests a license server to transmit a license 
identified by the hcense- identifying information. When receiving the request for a 
license, the license server carries out a charging process before transmitting the license 
to the client. The client can decode and play back the content on the condition of 
possessing the license. 
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CLAIMS 



[Claim(s)] 

[Claim 1] In the information processor which permits utilization of contents a 
condition [ holding the license ] The license specific information for specifying said 
license which carries out utilization authorization of the contents concerned. A 
contents storage means to memorize said contents including the enciphered contents 
data and key information required in order to decode contents data, A license storage 
means to memorize the license containing the contents specific information for 
specifying said contents by which utilization authorization is carried out, A judgment 
means to judge whether the license which can carry out utilization authorization of 
said contents is memorized by said license storage means, The information processor 
characterized by having a decode means to decode the contents data of said 
contents a condition [ it having been judged that the license was memorized by said 
judgment means ]. 

[Claim 2] It is the information processor according to claim 1 carry out that the 
license which said information processor was equipped with a transmitting means to 
transmit the license demand which contains the license identification information for 
identifying a license in a license server further, and a receiving means to receive the 
license transmitted by the license server, and was received by said receiving means is 
memorized by said license storage means as the description. 
[Claim 3] Said contents data are an information processor according to claim 1 
characterized by having further a playback means to reproduce the contents data 
which are data which combined text data, image data, voice data, a video data, or them, 
and were decoded by said decode means. 

[Claim 4] It is the information processor according to claim 1 which said key 



information is equipped with a device node key storage means to by.which said 
information processor memorizes a device node key further, including EKB (Enabling 
Key Block), and is characterized by for said decode means to decode said enciphered 
contents data using the root key by which decode processing might be carried out in 
said EKB (Enabling Key Block) using said device node key memorized by said device 
node key storage means. 

[Claim 5] Said key information contains the contents key further enciphered by said 
root key of EKB (Enabling Key Block). Said contents data are enciphered by said 
contents key. Said decode means said contents key decoded using the root key by 
which decode processing might be carried out in said EKB (Enabling Key Block) using 
said device node key memorized by said device node key storage means The 
information processor according to claim 4 characterized by using and decoding said 
enciphered contents data. 

[Claim 6] Said license is an information processor according to claim 1 characterized 
by including the service-condition information which shows further the service 
condition of contents which becomes available according to the license concerned. 
[Claim 7] Said license is an information processor according to claim 1 characterized 
by including further the electronic signature made with the private key of a license 
server. 

[Claim 8] Said information processor is equipped with a terminal identification 
information storage means to memorize the terminal identification information which 
identifies an information processor further. Said license demand includes further said 
terminal identification information memorized by the terminal identification 
information storage means. Said license received by said receiving means includes 
said terminal identification information further. Said judgment means Said terminal 
identification information memorized by said terminal identification information 
included in said license and said terminal identification information storage means is 
compared. The information processor according to claim 2 characterized by 
restricting when both are in agreement, and judging that the license concerned is a 
license to which utilization of said contents is permissible. 

[Claim 9] The license specific information for specifying said license which is the 
information processing approach of permitting utilization of contents a condition 
[ holding the license ]. and carries out utilization authorization of the contents 
concerned. The enciphered contents data and key information required in order to 
decode contents data. The step which memorizes the license containing the contents 
specific information for specifying the step which memorizes ****** contents, and 



said contents in which utilization authorization is carried out by the license concerned, 
The step which judges whether the license which can carry out utilization 
authorization of said contents is memorized by said license storage means, The 
information processing approach characterized by including the step which decodes 
the contents data of said contents a condition [ it having been Judged that the license 
was memorized by said judgment means ]. 

[Claim 10] The license specific information for being the program which makes a 
computer perform processing to which utilization of contents is permitted a condition 
[ holding the license ], and specifying said license which carries out utilization 
authorization of the contents concerned, The enciphered contents data and key 
information required in order to decode contents data, The step which memorizes the 
license containing the contents specific information for specifying the step which 
memorizes ^^^^^^ contents, and said contents in which utilization authorization is 
carried out by the license concerned, The step which judges whether the license 
which can carry out utilization authorization of said contents is memorized by said 
license storage means, The program which makes a computer perform the step which 
decodes the contents data of said contents a condition [ it having been judged that 
the license was memorized by said judgment means ]. 

[Claim 1 1] The program according to claim 10 characterized by enciphering said 
program or its part. 

[Claim 12] In the license server which publishes the license to which utilization of 
contents is permitted The contents specific information for specifying said contents 
in which utilization authorization is carried out by the license concerned, A receiving 
means transmitted from a license storage means to memorize said license including 
the terminal identification information which identifies an information processor, and 
the information processor to receive the license demand containing the license 
identification information which identifies a license. An extract means to extract said 
license corresponding to said license identification information contained in said 
license demand from said license storage means, A processing means to add said 
terminal identification information to said license extracted by said extract means, A 
signature means to add electronic signature to the license to which terminal 
identification information was added by said processing means using the private key of 
a license server, The license server characterized by having a transmitting means to 
transmit the license signed by said signature means to the information processor 
which transmitted said license demand. 

[Claim 13] The contents specific information for specifying said contents in which are 



the information processing approaches of publishing the license to which utilization of 
contents is permitted, and utilization authorization is carried out by the license 
concerned, The step which memorizes said license including the terminal identification 
information which identifies an information processor, The step which receives the 
license demand containing the license identification information which was 
transmitted from the information processor, and which identifies a license, The step 
which extracts said license corresponding to said license identification information 
contained in said license demand from said license storage means, The step which 
adds said terminal identification information to said license extracted by said extract 
means. The step which adds electronic signature to the license to which terminal 
identification information was added by said processing means using the private key of 
a license server, The information processing approach characterized by including the 
step which transmits the license signed by said signature means to the information 
processor which transmitted said license demand. 

[Claim 14] The contents specific information for being the program which makes a 
computer perform processing processing which publishes the license to which 
utilization of contents is permitted, and specifying said contents in which utilization 
authorization is carried out by the license concerned. The step which memorizes said 
license including the terminal identification information which identifies an information 
processor, The step which receives the license demand containing the license 
identification information which was transmitted from the information processor, and 
which identifies a license, The step which extracts said license corresponding to said 
license identification information contained in said license demand from said license 
storage means, The step which adds said terminal identification information to said 
license extracted by said extract means. The step which adds electronic signature to 
the license to which terminal identification information was added by said processing 
means using the private key of a license server, The program which makes a computer 
perform the step which transmits the license signed by said signature means to the 
information processor which transmitted said license demand. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] It is related with a program at the information processor and 
the approach the contents to which especially this invention is not licensed in an 
information processor and an approach, a license server, and a list from a copyright 
person about the program enabled it to prevent it being copied unjustly and used, a 
license server, and a list. 
[0002] 

[Description of the Prior Art] Recently, as a user provides other users with the music 
data which he holds through the Internet and offer is received for the music data 
which he does not hold from other users, the system which two or more users 
exchange music data for nothing, and suit is realized. 

[0003] If the contents of one music and others exist, since other users become [ no ] 
possible [ using it ]. many users stop purchasing contents and the copyright person 
about contents cannot sell the contents as a work at such a system theoretically, an 
opportunity to receive the loyalty about utilization of the work which can originally be 
received will be lost with a sale of a work. 
[0004] 

[Problem(s) to be Solved by the Invention] Then, it is requested socially that it should 

prevent being used unjustly, without barring the negotiation of contents. 

[0005] This invention is made in view of such a situation, and it enables it to prevent 

certainly that contents are used unjustly. 

[0006] 

[Means for Solving the Problem] The license specific information for specifying a 
license required in order that the information processor of this invention may carry 
out utilization authorization of the contents. A contents storage means to memorize 



contents including the encipliered contents data and key information required in order 
to decode contents data, A license storage means to memorize the license containing 
the contents specific information for specifying the contents by which utilization 
authorization is carried out, AJudgment means to Judge whether the license which can 
carry out utilization authorization of the contents is memorized by the license storage 
means, It is characterized by having a decode means to decode the contents data of 
contents a condition [ it having been judged that the license was memorized by the 
judgment means ]. 

[0007] An information processor has a transmitting means to transmit the license 
demand which contains the license identification information for identifying a license 
in a license server further, and a receiving means to receive the license transmitted 
by the license server, and the license received by the receiving means can be 
memorized by the license storage means. 

[0008] Contents data are data which combined text data, image data, voice data, a 
video data, or them, and can be further equipped with a playback means to reproduce 
the contents data decoded by the decode means. 

[0009] Key information is equipped with a device node key storage means by which an 
information processor memorizes a device node key further, including EKB (Enabling 
Key Block), and a decode means can decode the contents data enciphered using the 
root key by which decode processing might be carried out in EKB (EnablingKey Block) 
using the device node key memorized by the device node key storage means. 
[0010] Including the contents key as which key information was further enciphered by 
the root key of EKB (Enabling Key Block), contents data are enciphered by the 
contents key and a decode means can decode the contents data enciphered using the 
contents key decoded using the root key by which decode processing might be carried 
out in EKB (Enabling Key Block) using the device node key memorized by the device 
node key storage means. 

[0011] A license can include the service-condition information which shows further 
the service condition of contents which becomes available according to the license. 
[0012] A license can include further the electronic signature made with the private 
key of a license server. 

[0013] An information processor is equipped with a terminal identification information 
storage means to memorize the terminal identification information which identifies an 
information processor further. The license with which the license demand was 
received by the receiving means including the terminal identification information 
further memorized by the terminal identification information storage means includes 



terminal identification information further. A Judgment means The terminal 
identification information memorized by the terminal identification information 
included in a license and the terminal identification information storage means is 
compared, when both are in agreement, it restricts, and it can judge that the license is 
a license to which utilization of contents is permissible. 

[0014] License specific information for the information processing approach of this 
invention to specify the license which carries out utilization authorization of the 
contents, The enciphered contents data and key information required in order to 
decode contents data, The step which memorizes the step which memorizes ****** 
contents, and the license containing the contents specific information for specifying 
the contents by which utilization authorization is carried out, The step which judges 
whether the license which can carry out utilization authorization of the contents is 
memorized by the license storage means, It is characterized by including the step 
which decodes the contents data of contents a condition [ it having been judged that 
the license was memorized by the judgment means ], 

[0015] License specific information for the program of this invention to specify the 
license which carries out utilization authorization of the contents. The enciphered 
contents data and key information required in order to decode contents data. The 
step which memorizes the step which memorizes ****** contents, and the license 
containing the contents specific information for specifying the contents by which 
utilization authorization is carried out. The step which judges whether the license 
which can carry out utilization authorization of the contents is memorized by the 
license storage means, A computer is made to perform the step which decodes the 
contents data of contents a condition [ it having been judged that the license was 
memorized by the judgment means ]. 
[0016] A program or its part can be enciphered. 

[0017] Contents specific information for the license server of this invention to specify 
the contents permitted, A license storage means to memorize the license including 
the terminal identification information which identifies an information processor, A 
receiving means to receive the license- demand containing the license identification 
information which was transmitted from the information processor and which 
identifies a license, An extract means to extract the license corresponding to the 
license identification information contained in a license demand from a license storage 
means. A processing means to add terminal identification information to the license 
extracted by the extract means. It is characterized by having a signature means to 
add electronic signature to the license to which terminal identification information was 



added by the processing means, and a transmitting means to transmit the license 
signed by the signature means to the information processor which transmitted the 
license demand, using the private key of a license server. 

[0018] Contents specific information for the information processing approach of this 
invention to specify the contents by which utilization authorization is carried out, The 
step which memorizes the license including the terminal identification information 
which identifies an information processor, The step which receives the license 
demand containing the license identification information which was transmitted from 
the information processor, and which identifies a license, The step which extracts the 
license corresponding to the license identification information contained in a license 
demand from a license storage means, The step which adds terminal identification 
information to the license extracted by the extract means, It is characterized by 
including the step which adds electronic signature to the license to which terminal 
identification information was added by the processing means, and the step which 
transmits the license signed by the signature means to the information processor 
which transmitted the license demand using the private key of a license server. 
[0019] In a program, contents are decoded a condition [ holding the license ] in the 
information processor of this invention, the information processing approach, and a 
list, and it is made available. 

[0020] By the information processing approach, an effective license is published only 
with a specific information processor in the license server of this invention, and a list. 
[0021] 

[Embodiment of the Invention] Drawing 1 shows the contents offer structure of a 
system which applied this invention. A client 1-1 and 1-2 (hereafter, when these 
clients do not need to be distinguished separately, a client 1 is only called) are 
connected to the Internet 2. In this example, although two clients are shown, the 
client of the number of arbitration is connected to the Internet 2. 
[0022] Moreover, when the contents server 3 which offers contents to a client 1 , the 
license server 4 which gives a license required to use the contents which the 
contents server 3 offers to a client 1, and a client 1 receive a license, the accounting 
server 5 which performs accounting to the client 1 is connected to the Internet 2. 
[0023] These contents servers 3, a license server 4, and the accounting server 5 are 
also connected to the number of arbitration, and the Internet 2. 
[0024] Drawing 2 expresses the configuration of a client 1. 

[0025] In drawing 2 , CPU (Central Processing Unit)21 performs various kinds of 
processings according to the program memorized by ROM (Read Only Memory)22 or 



the program loaded to RAM (Random Access Memory)23 from the storage section 28. 
a timer 20 — a time check — it operates and time information is supplied to CPU21. 
To RAM23, CPU21 performs various kinds of processings upwards again, and required 
data etc. are memorized suitably. 

[0026] The encryption decode section 24 performs processing which decodes the 
already enciphered contents data while enciphering contents data. Contents data are 
encoded by ATRAC(Adaptive Transform Acoustic Coding)3 method etc., and the 
codec section 25 is made to supply and record on the semiconductor memory 44 
connected to the drive 30 through the input/output interface 32. Or the codec 
section 25 decodes the data which were read from semiconductor memory 44 through 
the drive 30 and which are encoded again. 

[0027] Semiconductor memory 44 is constituted by the memory stick (trademark) etc. 
[0028] CPU21, ROM22. RAM23. the encryption decode section 24. and the codec 
section 25 are mutually connected through the bus 31. The input/output interface 32 
is also connected to this bus 31 again. 

[0029] The communications department 29 which consists of the storage section 28 
which consists of a display which consists of the input section 26 which consists of a 
keyboard, a mouse, etc.. CRT. LCD. etc.. the output section 27 which becomes a list 
from a loudspeaker etc.. a hard disk. etc.. a modem, a terminal adopter, etc. is 
connected to the input/output interface 32. The communications department 29 
performs the communications processing through the Internet 2. The communications 
department 29 performs the communications processing of an analog signal or a 
digital signal among other clients again. 

[0030] Drive 30 is connected to an input/output interface 32 again if needed, it is 
suitably equipped with a magnetic disk 41, an optical disk 42, a magneto-optic disk 43. 
or semiconductor memory 44, and the computer program by which reading 
appearance was carried out from them is installed in the storage section 28 if needed. 
[0031] In addition, although a graphic display is omitted, the contents server 3. a 
license server 4, and the accounting server 5 are also constituted by the client 1 
shown in drawing 2 . and the computer which has the same configuration 
fundamentally. Then, in the following explanation, the configuration of drawing 2 is 
quoted also as a configuration of the contents server 3, a license server 4, the 
accounting server 5. etc. 

[0032] Next, with reference to the flow chart of drawing 3 . the processing whose 

client 1 receives offer of contents from the contents server 3 is explained. 

[0033] When a user orders it access to the contents server 3 by operating the input 



section 26. CPU21 controls the communications department 29 and he makes it 
access the contents server 3 through the Internet 2 in step SI. In step S2, a user 
operates the input section 26. and if the contents which receive offer are specified, 
CPU21 will notify the contents specified as the contents server 3 through the Internet 
2 from reception and the communications department 29 in this assignment 
information. Since the contents data with which the carrier beam contents server 3 
was enciphered in this advice are transmitted so that it may mention later with 
reference to the flow chart of drawing 4 , in step S3, CPU21 will supply and store that 
contents data enciphered in the hard disk which constitutes the storage section 28 in 
step S4, if this contents data is received through the communications department 29. 
[0034] Next, with reference to the flow chart of drawing 4 , contents offer processing 
of the contents server 3 corresponding to the above processing of a client 1 is 
explained. In addition, in the following explanation, the configuration of the client 1 of 
drawing 2 is quoted also as a configuration of the contents server 3. 
[0035] In step S21, when it stands by until CPU21 of the contents server 3 received 
access from the Internet 2 from the client 1 through the communications department 
29. and access is judged to be a carrier beam, it progresses to step S22 and 
incorporates the information which specifies the contents transmitted from the client 
1 . The information which specifies these contents is information which the client 1 has 
notified in step S2 of drawing 3 . 

[0036] In step S23. CPU21 of the contents server 3 reads the contents specified for 
the information incorporated by processing of step S22 out of the contents data 
memorized by the storage section 28. CPU21 supplies the contents data by which 
reading appearance was carried out from the storage section 28 to the encryption 
decode section 24, and makes them encipher in step S24 using the contents key Kc. 
[0037] Since the contents data memorized by the storage section 28 are already 
encoded by the codec section 25 with ATRAC3 method, this contents data encoded 
will be enciphered. 

[0038] In addition, of course, the storage section 28 can be made to memorize 
contents data in the condition of having enciphered beforehand. In this case, 
processing of step S24 can be omitted. 

[0039] Next, in step S25, CPU21 of the contents server 3 adds the license ID for 
discriminating a license required using contents from key information (EKB and 
KEKBC (Kc) which are later mentioned with reference to drawing 5 ) required 
decoding the contents enciphered to the header which constitutes the format which 
transmits the enciphered contents data. And in step S26. CPU21 of the contents 



server 3 transmits the data which formatted the key and the header which added 
License ID to the accessed client 1 through the Internet 2 from the communications 
department 29 at the contents enciphered by processing of step S24. and processing 
of step S25. 

[0040] Drawing 5 is carried out in this way, and expresses the configuration of a 
format in case contents are supplied to a client 1 from the contents server 3. This 
format is constituted by a header (Header) and data (Data) as shown in this drawing. 
[0041] The data KEKBC (Kc) as contents information (Content information), 
digital-rights management information (DRM(Digital Right Management) information), 
License ID (License ID), an INEBU ring key block (validation key block) (EKB 
(EnablingKey Block)), and a contents key Kc enciphered using the key KEKBC 
generated from EKB are arranged at the header. In addition, about EKB, it mentions 
later with reference to drawing 15 . 

[0042] Information, such as a method of the content ID (CID) as identification 
information for identifying the contents data by which formatting is carried out as data, 
and the codec of the contents, is included in contents information. 
[0043] The regulation and condition (Usage rules/status) which use contents, and 
URL (Uniform Resource Locator) are arranged at digital-rights management 
information. The count of playback of contents, the count of a copy, etc. are 
described by an activity regulation and the condition. 

[0044] URL is address information accessed when acquiring the license specified with 
License ID, and is the address of the license server 4 specifically required in the case 
of the system of drawing 1 , since it is licensed. License ID identifies the license 
needed when using the contents currently recorded as data. 

[0045] Data are constituted by the encryption block (Encryption Block) of the number 
of arbitration. Each encryption block is constituted by an initial vector (IV (Initial 
Vector)), seed (Seed), and data EK'c (data) that enciphered contents data by key K'c. 
[0046] Key K'c is constituted by the value calculated to the Hash Function with the 
application of the contents key Kc and the value Seed set up by random numbers as 
shown in a degree type. 

[0047] K c=Hash (Kc. Seed) [0048] The initial vector IV and Seed Seed are set as a 
different value for every encryption block. 

[0049] This encryption classifies the data of contents per 8 bytes, and is performed 
every 8 bytes. 8 bytes of latter encryption is performed in the CBC (Cipher Block 
Chaining) mode performed using the result of 8 bytes of encryption of the preceding 
paragraph. 



[0050] Since 8 bytes of encryption result of the preceding paragraph does not exist 
when enciphering 8 bytes of first contents data in the case of the CBC mode, when 
enciphering 8 bytes of first contents data, encryption is performed by making the 
initial vector IV into initial value. 

[0051] By performing encryption by this CBC mode, even if one encryption block is 
decoded, it is controlled that that effect attains to other encryption blocks. 
[0052] In addition, about this encryption, drawing 46 is made reference and explained 
in full detail behind. 

[0053] Moreover, about a cipher system, it does not restrict to this. 
[0054] A client 1 is no charge about the contents server 3 to contents as mentioned 
above, and can be acquired freely. Therefore, the contents itself become possible 
[ distributing to a large quantity ]. 

[0055] However, each client 1 needs to hold the license, when using the acquired 
contents. Then, with reference to drawing 6 , processing in case a client 1 reproduces 
contents is explained. 

[0056] In step S41 , CPU21 of a client 1 acquires the identification information (CID) of 
the contents directed because a user operates the input section 26. This 
identification information is constituted by the title of contents, the number given for 
each [ which is memorized ] contents of every. 

[0057] And CPU21 will read the license ID corresponding to the contents (ID of a 
license required to use the contents), if contents are directed. This license ID is 
described by the header of the contents data enciphered as shown in drawing 5 . 
[0058] Next, it progresses to step S42, the license corresponding to the license ID in 
which CPU21 was read at step S41 is already acquired by the client 1, and it judges 
whether the storage section 28 memorizes. When the license is not acquired, it 
progresses to step S43 and, as for CPU21, license acquisition processing is still 
performed. The detail of this license acquisition processing is later mentioned with 
reference to the flow chart of drawing 7 . 

[0059] In step S42, when judged with the license already being acquired, or when [ as 
a result of performing license acquisition processing ] a license is acquired in step S43, 
it progresses to step S44 and CPU21 judges whether the license acquired is a thing 
within an expiration date. It is judged to be the length (to refer to drawing 8 mentioned 
later) specified as a content of the license by comparing with the time of present in 
Japan [ which is clocked by the timer 20 ] whether a license is a thing within an 
expiration date. When judged with the expiration date of a license having already 
expired, CPU21 progresses to step S45, and performs a license update process. The 



detail of this license update process is later mentioned with reference to the flow 
chart of drawing 10 . 

[0060] When judged with a license being still within an expiration date, or when a 
license is updated in step S45, it progresses to step S46, and CPU21 reads the 
contents data enciphered from the storage section 28, and is made to store them in 
RAM23 in step S44. And it is the encryption block unit arranged at the data of drawing 
5 , the data of the encryption block memorized by RAM23 are supplied to the 
encryption decode section 24, and CPU21 makes them decode in step S47 using the 
contents key Kc. 

[0061] Although the example of the approach of obtaining the contents key Kc is later 
mentioned with reference to drawing 15 , it can obtain the key KEKBC contained in 
EKB ( drawing 5 ) using a device node key (DNK) ( drawing 8 ), and can obtain the 
contents key Kc from Data KEKBC (Kc) and ( drawing 5 ) using the key KEKBC. 
[0062] CPU21 makes the codec section 25 supply and decode further the contents 
data decoded by the encryption decode section 24 in step S48. And D/A conversion 
of the data decoded by the codec section 25 is supplied and carried out to the output 
section 27 from an input/output interface 32, and CPU21 makes them output from a 
loudspeaker. 

[0063] Next, with reference to the flow chart of drawing 7 . the detail of the license 
acquisition processing performed at step S43 of drawing 6 is explained. 
[0064] The client 1 acquires the service data containing the pair of Leaves ID and 
DNK (Device Node Key), and the private key and public key of a client 1 . the public key 
of a license server, and the certificate of each public key by registering with a license 
server in advance. 

[0065] It is a device node key required for Leaf ID to express the identification 
information assigned for every client, and for DNK decode the contents key Kc which 
is contained in EKB (validation key block) corresponding to the license and which is 
enciphered (with reference to drawing 1 2 , it mentions later). 

[0066] In step S61, CPU21 acquires first URL corresponding to the license ID now 
made into the processing object from the header shown in drawing 5 . As mentioned 
above, this URL is the address which should be accessed when acquiring the license 
corresponding to the license ID too described by the header. Then, in step S62, 
CPU21 accesses URL acquired at step S61. Specifically, access is performed to a 
license server 4 by the communications department 29 through the Internet 2. At this 
time, a license server 4 requires the input of user ID and a password of the license 
assignment information and the list which specify the license (license required to use 



contents) to purchase from a client 1 (step SI 02 of drawing 9 mentioned later). 
CPU21 displays this demand on the display of the output section 27. Based on this 
display, a user operates the input section 26 and enters license assignment 
information, user ID. and a password. In addition, the user of a client 1 accesses a 
license server 4 through the Internet 2, and acquires this user ID and password in 
advance. 

[0067] In steps S63 and S64, CPU21 incorporates user ID and a password while 
incorporating the license identification information inputted from the input section 26. 
CPU21 makes the license demand which controls the communications department 29 
and contains the inputted user ID and the leaf ID contained in license assignment 
information and service data (it mentions later) in a password transmit to a license 
server 4 through the Internet 2 in step S65. 

[0068] a license server 4 is later mentioned with reference to drawing 9 — as — user 
ID, a password, and a list — license assignment information — being based — a 
license — transmitting (step S109) — or a license is not transmitted when conditions 
are not fulfilled (step S1 1 2). 

[0069] When it judges whether the license has been transmitted from the license 
server 4 and the license has been transmitted, CPU21 progresses to step S67, and 
makes the storage section 28 supply and memorize the license in step S66. 
[0070] In step S66, when it judges with a license not being transmitted. CPU21 
progresses to step S68, and performs error processing. Since the license for using 
contents is not acquired, specifically, CPU21 forbids regeneration of contents. 
[0071] It becomes possible to use the contents only after acquiring the license 
corresponding to the license ID with which each client 1 accompanies contents data 
as mentioned above. 

[0072] In addition, license acquisition processing of drawing 7 can also be beforehand 
carried out, before each user acquires contents. 

[0073] The license with which a client 1 is provided contains a service condition and 
leaf ID ****, as shown in drawing 8 . 

[0074] The expiration date which can use contents for a service condition based on 
the license. The download length which can download contents based on the license, 
The count which can copy contents based on the license (count of a copy allowed), It 
is based on the count of check-out, the count of the maximum check-out. and its 
license. The information which shows the count which can copy contents to access 
recordable on CD-R and PD (Portable Device), the access which can shift a license to 
ownership (acquisition condition), the duty in which an activity log is taken, etc. is 



included. 

[0075] Next, with reference to the flow chart of drawing 9 , license offer processing of 
the license server 4 performed corresponding to license acquisition processing of the 
client 1 of drawing 7 is explained. In addition, the configuration of the client 1 of 
drawing 2 is quoted as a configuration of a license server 4 also in this case. 
[0076] In step S101, CPU21 of a license server 4 stands by until it receives access 
from a client 1, and it requires transmission of license assignment information of user 
ID, a password, and a list from the client 1 which progressed to step SI 02 at the time 
of a carrier beam, and has accessed access. As it mentioned above, when license 
assignment information (license ID) has been transmitted to user ID, the password, 
and the leaf ID list by processing of step S65 of drawing 7 from the client 1 , CPU21 of 
a license server 4 performs processing which receives and incorporates this through 
the communications department 29. 

[0077] and the credit of the user corresponding to [ CPU21 of a license server 4 
accesses the accounting server 5 from the communications department 29 in step 
S103. and ] user ID and a password — processing is required, the accounting server 5 

— the Internet 2 — minding — the credit from a license server 4 — the credit which 
permits grant of a license when the demand of processing is received, the payment 
hysteresis of the past of the user corresponding to the user ID and password etc. is 
investigated, it investigates whether there is any track record of the nonpayment of 
the countervalue of a license of the user in the past and there is such no track record 

— the case where a result is transmitted and there is a track record of nonpayment 
etc. — the credit of the disapproval of licensing — a result is transmitted. 

[0078] step SI 04 — setting — CPU21 of a license server 4 — the credit from the 
accounting server 5 — the credit which permits that a result gives a license — when 
it judges whether it is a result and grant of a license is permitted, it progresses to step 
SI 05 and the license corresponding to the license assignment information 
incorporated by processing of step SI 02 takes out out of the license memorized by 
the storage section 28. As for the license memorized by the storage section 28, 
information, such as License ID. a version, the date and time of creation, and an 
expiration date, is described beforehand. In step S106. CPU21 adds the leaf ID 
received with the license. Furthermore, in step SI 07. CPU21 chooses the service 
condition matched with the license chosen at step SI 05. Or by processing of step 
S102. when a service condition is specified from a user, it is added to the service 
condition for which the service condition is prepared beforehand if needed again. 
CPU21 adds the selected service condition to a license. 



[0079] In step SI 08, CPU21 signs a license with the private key of a license server, 
and, thereby, the license of a configuration as shown in drawing 8 is generated. 
[0080] Next, it progresses to step SI 09 and CPU21 of a license server 4 makes the 
license (it has the configuration shown in drawing 8 ) transmit to a client 1 through the 
Internet 2 from the communications department 29. 

[0081] CPU21 of a license server 4 makes the storage section 28 memorize the 
license (for a service condition and Leaf ID to be included) which is processing of step 
SI 09 and was transmitted now in step S1 10 corresponding to the user ID and the 
password which were incorporated by processing of step SI 02. Furthermore, in step 
S1 1 1 , CPU21 performs accounting. Specifically, CPU21 requires the accounting to the 
user corresponding to the user ID and password of the accounting server 5 from the 
communications department 29. The accounting server 5 performs accounting to that 
user based on the demand of this accounting. As mentioned above, when the payment 
[ that user ] to this accounting, it can be licensed even if that user demands grant of 
a license henceforth. 

[0082] namely, the credit which makes grant of a license disapproval from the 
accounting server 5 in this case — since a result is transmitted, it progresses to step 
S112 from step S104, and CPU21 performs error processing. CPU21 of a license 
server 4 outputs the message of the purport which cannot give a license to the client 
1 which controlled the communications department 29 and has accessed it, and, 
specifically, terminates processing. 

[0083] In this case, since that client 1 cannot be licensed as mentioned above, using 
those contents (decoding a code) can be performed. 

[0084] Drawing 10 expresses the detail of the license update process in step S45 of 
drawing 6 . Processing of step SI 31 of drawing 10 thru/or step SI 35 is the same 
processing as processing and the basic target of step S61 of drawing 7 thru/or step 
S65. However, in step SI 33, CPU21 incorporates the license ID of the license instead 
of the license to purchase to update. And in step SI 35, CPU21 transmits the license 
ID of the license updated with user ID and a password to a license server 4. 
[0085] Corresponding to transmitting processing of step S135, a license server 4 
presents a service condition so that it may mention later (step S153 of drawing 1 1 ). 
Then, in step SI 36, CPU21 of a client 1 receives presentation of the service condition 
from a license server 4, and outputs and displays this on the output section 27. A user 
operates the input section 26, and a predetermined service condition is chosen out of 
this service condition, or he newly adds a predetermined service condition. CPU21 
transmits the application for purchasing the service condition (conditions which 



update a license) chosen as mentioned above to a license server 4 at step S137. 
Corresponding to this application, a license server 4 transmits a final service condition 
so that it may mention later (step SI 54 of drawing 1 1 ). Then, in step SI 38, CPU21 of 
a client 1 acquires the service condition from a license server 4, and updates the 
service condition as a service condition of the corresponding license already 
memorized by the storage section 28 in step SI 39. 

[0086] Drawing 11 expresses the license update process which a license server 4 
performs corresponding to the license update process of the above client 1. 
[0087] First, in step SI 51, CPU21 of a license server 4 will receive the license 
assignment information which the client 1 transmitted at step SI 35 with the renewal 
demand information of a license in step SI 52, if access from a client 1 is received. 
[0088] In step SI 53, if an updating demand of a license is received, CPU21 will read 
the service condition (service condition to update) corresponding to the license from 
the storage section 28, and will transmit it to a client 1. 

[0089] If it applies for the purchase of a service condition from a client 1 by 
processing of step SI 37 of drawing 10 to this presentation as mentioned above, in 
step SI 54, CPU21 of a license server 4 will generate the data corresponding to the 
service condition for which it applied, and will transmit them to a client and 1 in step 
S154. A client 1 updates the service condition of the already registered license using 
the service condition received by processing of step SI 39, as mentioned above. 
[0090] In this invention, as shown in drawing 12 , the key of a device and a license is 
managed based on the principle of a broadcasting in chestnut PUSHON (Broadcast 
Encryption) method. A key is made into a hierarchy tree structure and the leaf (leaf) 
of the bottom corresponds to the key of each device. In the case of the example of 
drawing 1 2 , 1 6 devices from a number 0 to a number 15 or the key corresponding to a 
license is generated. 

[0091] Each key is specified corresponding to each node of the tree structure shown 
by the drawing Nakamaru mark. In this example, the key KOOO thru/or the key K1 1 1 
correspond [ corresponding to the root node of the maximum upper case / the root 
key KR / keys KO and K1 / a key KOO thru/or K1 1 ] corresponding to the node of the 
4th step corresponding to the 3rd step of node, respectively corresponding to the 2nd 
step of node. And a key KOOOO thru/or K1 1 11 support the leaf (device node) as a node 
of the bottom, respectively. 

[0092] Since it considers as the layered structure, the key of the high order of a key 
K001 0 and a key 001 1 is set to K001 , and the key of the high order of a key KOOO and 
a key K001 is set to KOO. Like the following, the key of the high order of a key KOO and 



a key KOI is set to KO, and the key of the high order of a key KO and a key Kl is set to 
KR. 

[0093] The key using contents is managed by the key corresponding to each node of 
one pass from the device node (leaf) of the bottom to the root node of the maximum 
upper case. For example, based on the license corresponding to the node (leaf ID) of a 
number 3, the key using contents is managed by each key of the pass containing Keys 
K0011, K001, KOO, KO, and KR. 

[0094] In the system of this invention, as shown in drawing 1 3 , it is the keying system 
constituted based on the principle of drawing 12 , and management of the key of a 
device and the key of a license is performed. In the example of drawing 13 , 8+24+32 
steps of nodes are made into a tree structure, and a category corresponds to each 
node from a root node to eight steps of low order. The category in here means 
categories, such as a category of the device which uses semiconductor memory, such 
as a memory stick, and a category of a device which receives digital broadcasting. And 
this system (T system is called) corresponds to one node in this category node as a 
system which manages a license. 

[0095] That is, a license corresponds by the key corresponding to 24 steps of a 
younger hierarchy's nodes further from the node of this T system. In the case of this 
example, thereby, the license of 224 (about 16 mega) can be specified. Furthermore, 
32 steps of lower hierarchies can prescribe the user (or client 1) of 232 (about 4giga). 
The key corresponding to 32 steps of nodes of the bottom constitutes DNK (Device 
Node Key), and let ID corresponding to the leaf of the bottom be Leaf ID. 
[0096] Each device and the key of a license correspond to one of the pass which 
consists of each node of 64 (= 8+24+32) stages. For example, the contents key which 
enciphered contents is enciphered using the key corresponding to the node which 
constitutes the pass assigned to the corresponding license. It is enciphered using the 
key of the hierarchy of the latest low order, and the key of the hierarchy of a high 
order is arranged in EKB (with reference to drawing 1 5 , it mentions later). DNK of the 
bottom is not arranged in EKB, but is described by service data, and is given to a 
user's client 1. A client 1 decodes the key of the hierarchy on it to the pan described 
in EKB using the key which decoded the key of the hierarchy of the latest high order 
described in EKB ( drawing 15 ) distributed with contents data, and decoded and 
obtained it using DNK described by the license. By performing the above processing 
one by one, a client 1 can obtain all the keys belonging to the pass of the license. 
[0097] The concrete example of the classification of the category of a hierarchy tree 
structure to drawing 14 is shown. In drawing 14 , the root key KR2301 is set to the 



maximum upper case of a hierarchy tree structure, the node key 2302 is set to the 
following intermediate stages, and the leaf key 2303 is set to the bottom. Each device 
holds each leaf key, and a series of node keys and root key from a leaf key to a root 
key. 

[0098] The predetermined node of the Mth step (the example of drawing 13 M= 8) is 
set up as a category node 2304 from the maximum upper case. That is, let each of the 
node of the Mth step be the device setting-out node of a specific category. Let M+1 
or less step of node, and a leaf be the node and leaf about the device contained in the 
category by making one node of the Mth step into top-most vertices. 
[0099] For example, a category [a memory stick (trademark)] is set to one node 2305 
of the Mth step of drawing 14 , and the node which stands in a row below in this node, 
and a leaf are set up as the node or leaf containing various devices which used 
memorandum RISUTEIIKU only for categories. That is, 2305 or less node is defined as 
the related node of the device defined as the category of a memory stick, and a set of 
a leaf. 

[0100] Furthermore, a low-ranking stage can be set up as a subcategory node 2306 by 
several steps from M steps. In the example of drawing 14 , the node 2306 of [the 
vessel only for playbacks] is set up as a subcategory node contained in the category 
of the device which used the memory stick for the node under two steps of the 
category [memory stick] node 2305. furthermore — sub — a category — a node — it 
is — playback — dedication — a vessel — a node — 2306 — less than — playback 
— dedication — a vessel — a category — containing — having — music — a 
regenerative function — with — a telephone — a node — 2307 — setting up — 
having — further — the — low order — music — a regenerative function — with — a 
telephone — a category — containing — having — [ — PHS — ] — a node — 2308 — 
[— a cellular phone — ] — a node — 2309 ~ setting up ~ having — **** . 
[0101] Furthermore, a category and a subcategory can be set up in units (these are 
generically called an entity hereafter) of arbitration, such as not only the class of 
device but the node which a certain manufacturer, a content provider, a 
settlement-of-accounts engine, etc. manage uniquely, for example, i.e., a batch, a 
jurisdiction unit, or an offer service unit. For example, if it sets up as a 
top-most-vertices node only for game device XYZ(s) to which a game equipment 
manufacturer sells one category node To the game device XYZ which a manufacturer 
sells, the node key of the lower berth below the top-most-vertices node. It becomes 
possible to store and sell a leaf key. Distribution of after that and encryption contents. 
Or the validation key block (EKB) constituted by the node key below the 



top-most-vertices node key and the leaf key in distribution of various keys and an 
update process is generated and distributed, and distribution of available data is 
attained only to the device below a top-most-vertices node. 

[0102] Thus, by considering as the configuration which sets up the following nodes as 
a related node of the category defined as the top-most-vertices node, or a 
subcategory by making one node into top-most vertices The validation key block 
(EKB) to which the manufacturer who manages one top-most-vertices node of a 
category stage or a subcategory stage, a content provider, etc. make the node 
top-most vertices is generated uniquely. The configuration distributed to the device 
belonging to below a top-most-vertices node is attained, and renewal of a key can be 
performed, without affecting at all the device belonging to the node of other 
categories which do not belong to a top-most-vertices node. 

[0103] For example, in the tree structure shown in drawing 12 , four devices 0, 1,2, 
and 3 contained in one group hold the keys KOO. KO, and KR common as a node key. 
By using this node key share configuration, it becomes possible to provide only 
devices 0. 1. 2. and 3 with a common contents key. For example, if node key KOO the 
very thing held in common is set up as a contents key, setting out of a contents key 
only with common devices 0, 1. 2. and 3 is possible, without performing new key 
sending. Moreover, if the value Enc (KOO. Kcon) which enciphered the new contents 
key Kcon by the node key KOO is stored in a record medium through a network and 
distributed to devices 0, 1, 2. and 3 Only devices 0. 1. 2. and 3 become possible 
[ solving Code Enc (KOO Kcon) using the share node key KOO held in each device, and 
obtaining the contents key Kcon ]. In addition, it is shown that Enc (Ka, Kb) is data 
which enciphered Kb by Ka. 

[0104] Moreover, when the keys K001 1, K001, KOO, KO, and KR which a device 3 owns 
having been analyzed by the aggressor (hacker), and having exposed is revealed, in 
order to protect the data transmitted and received by the system (group of devices 0. 
1, 2, and 3) after it in t at a certain event, it is necessary to separate a device 3 from 
a system. For that purpose, it is necessary to update the node keys K001. KOO. KO, 
and KR to respectively new key K (t)001 and K (t)00 and K (t)0 and K(t) R. and to tell 
the updating key to devices 0, 1, and 2. Here, it is shown that K(t) aaa is the updating 
key of the generation (Generation) t of Key Kaaa. 

[0105] distribution **** of an updating key — it ****** just. Renewal of a key is 
performed by storing the table constituted by the block data called the validation key 
block (EKB:Enabling Key Block) shown for example, in drawing 15 A in a record 
medium, and supplying it to devices 0. 1. and 2 through a network. In addition, a 



validation key block (EKB) is constituted by the cryptographic key for distributing the 
key newly updated by the device corresponding to each leaf (node of the bottom) 
which constitutes a tree structure as shown in drawing 12 . A validation key block 
(EKB) may be called the renewal block of a key (KRBiKey Renewal Block). 
[0106] The validation key block (EKB) shown in drawing 1 5 A is constituted as block 
data with the data configuration which can update only the required device of renewal 
of a node key. The example of drawing 15 A is the block data formed for the purpose 
of distributing Generation's t updating node key in the devices 0, 1, and 2 in the tree 
structure shown in drawing 12 . K (t)00 and K (t)0 and K(t) R are required for a device 

0 and a device 1 as an updating node key, and K (t)001 and K (t)00 and K (t)0 and its 
K(t) R are required for a device 2 as an updating node key so that clearly from drawing 
12 . 

[0107] As shown in EKB of drawing 15 A, two or more cryptographic keys are 
contained in EKB. The cryptographic key of the bottom of drawing 15 A is Enc (K0010. 
K(t)001). this ~ a device — two — having — a leaf — a key — K — 0010 — 
enciphering — having had — updating — a node — a key — K — ( — t — ) — 001 
it is — a device — two — self — having — a leaf — a key — K — 0010 — this 
cryptographic key — decoding — the updating node key K — 001 can be obtained, 
moreover, the updating node key K obtained by decode — 001 — using — decode of 
the 2nd step of cryptographic key Enc (K (t)001 and K (t) — 00) is possible from under 
drawing 1 5 A — becoming — the updating node key K — 00 can be obtained. 
[0108] decoding the 2nd step of cryptographic key Enc (K (t)00 and K (t) ~ 0) from on 
drawing 15 A one by one below — the updating node key K — 0 is obtained and 
updating root key K(t) R is obtained from on drawing 15 A using this by decoding the 

1 st step of cryptographic key Enc (K (t)0, K(t) R). 

[0109] On the other hand, the node key KOOO is not contained in the object to update, 
but the things whose nodes 0 and 1 are need as an updating node key are K (t)00 and 
K (t)0 and K(t) R. Nodes 0 and 1 acquire updating node key K(t)00 using the debye 
skiings KOOOO and K0001 by decoding the 3rd step of cryptographic key Enc (KOOO. 
K(t)OO) from on drawing 15 A. one by one below by decoding the 2nd step of 
cryptographic key Enc (K (t)00 and K (t) — 0) from on drawing 15 A Updating node key 
K (t) 0 is obtained and updating root key K(t) R is obtained from on drawing 15 A by 
decoding the 1st step of cryptographic key Enc (K (t)0. K(t) R). Thus, devices 0. 1. and 

2 can obtain updated key K(t) R. 

[01 1 0] In addition, the index of drawing 15 A shows the absolute address of the node 
key used as a decode key for decoding the cryptographic key on the right-hand side 



of drawing, and a leaf key. 

[01 1 1] It is unnecessary, and renewal of node key [ of the high order stage of a tree 
structure shown in drawing 12 ] K (t)0 and K(t) R can distribute updating node key 
K(t)00 to devices 0, 1 , and 2 by using the validation key block (EKB) of drawing 15 B. 
when only the node key KOO needs to be updated. 

[01 12] EKB shown in drawing 1 5 B is available when distributing the new contents key 
shared in a specific group. As an example, the record medium with the devices 0, 1, 2, 
and 3 in the group who shows by the dotted line is used for drawing 12 , and new 
common contents key K(t) con presupposes that it is required, this — the time — a 
device — zero — one — two — three — being common — a node — a key — K — 
00 — having updated — K — ( — t — ) — 00 — using — being new — being common 

— updating — contents — a key — K — ( — t — ) — con — having enciphered — 
data — Enc (K (t) 00 K(t) con) — drawing 1 5 — B — being shown — having — EKB 

— distributing — having . By this distribution, the distribution of a device 4 etc. as 
data which cannot decode other groups' device is attained. 

[0113] namely. — a device — zero — one — two — EKB — processing — having 
obtained — a key — K — ( — t — ) — 00 — using — a cipher — decoding — if — t 

— an event — contents — a key — K — ( — t — ) — con — obtaining — things — 
possible — becoming . 

[0114] Processing of the device 0 which received the data Enc (K (t) 00 K(t) con) 
which enciphered new common contents key K(t) con to drawing 16 , using K(t)00 as 
an example of processing which obtains contents key K(t) con in t event, and EKB 
shown in drawing 15 B through the record medium is shown. That is, this example is an 
example which set the encryption message data based on EKB to contents key K(t) 
con. 

[0115] As shown in drawing 16 , a device 0 generates node key K(t)00 by same EKB 
processing with having mentioned above using EKB at the generation t event stored in 
the record medium, and the node key KOOO which he stores beforehand, furthermore, 
the updating node key K which decoded the device 0 — using 00, updating contents 
key K(t) con is decoded, and in order to use it behind, it enciphers and stores by the 
leaf key KOOOO which he has. 

[01 1 6] The example of a format of a validation key block (EKB) is shown in drawing 1 7 . 
A version 601 is an identifier which shows the version of a validation key block (EKB). 
In addition, a version has the function to identify the newest EKB, and the function 
which shows response relation with contents. A depth shows the number of 
hierarchies of the hierarchy tree to the .device of the distribution place of a validation 



key block (EKB). A data pointer 603 is a pointer in which the location of the data 
division 606 in a validation key block (EKB) is shown, and the tag pointer 604 is a 
pointer which the location of the tag section 607 and the signature pointer 605 show 
the location of signature 608. 

[01 1 7] Data division 606 store the data which enciphered the node key updated, for 
example. For example, each cryptographic key about the updated node key as shown 
in drawing 16 etc. is stored. 

[0118] The tag section 607 is a tag in which the physical relationship of the 
enciphered node key which was stored in data division 606 and a leaf key is shown. 
The grant rule of this tag is explained using drawing 18 . 

[0119] Drawing 18 shows the example which sends the validation key block (EKB) 
previously explained by drawing 15 A as data. The data at this time come to be shown 
in the table of drawing 18 B. Let the address of the top node contained in the 
cryptographic key at this time be a top node address. Since updating key K(t) R of a 
root key is contained in the case of this example, a top node address serves as KR. 
The data Enc (K (t)0. K(t) R) at this time, for example, the maximum upper case, 
correspond to the location PO shown in the hierarchy tree shown in drawing 1 8 A. the 
data of the next stage are Enc (K (t)00 and K (t) — 0). and correspond to the location 
POO at the lower left of front data on a tree. When it sees from the position of a tree 
structure and data are in the bottom of it, a tag is set as 0 and a tag is set as 1 , when 
there is nothing. A tag is set up as {a left (L) tag and a right (R) tag}. Since there are 
data in the location POO at the lower left of the location PO corresponding to the 
data Enc (K (t)0, K(t) R) of the maximum upper case of drawing 18 B and there are no 
data in L tag =0 and the right, it is set to R tag =1. Hereafter, a tag is set as all data 
and the data stream shown in drawing 18 0 and a tag train are constituted. 
[01 20] A tag is set up in order that the corresponding data Enc (Kxxx, Kyyy) may show 
where [ of a tree structure ] it is located, the key data Enc (Kxxx, Kyyy) stored in data 
division 606 — although it is only enumeration data of a key with which ... was 
enciphered simply, distinction of the location on the tree of the cryptographic key 
stored as data with the tag mentioned above is attained. The node index to which 
encryption data were made to correspond is used like a configuration of that previous 
drawing 15 explained, without using the tag mentioned above, for example, it is 0:Enc 
(K (t)0. K(t) R). 
00:Enc(K(t)OO.K(t)0 
000:Enc(K((t)000,K(t)00) 

Although considering as a data configuration like ... is also possible, if it is a 



configuration using such an index, in the distribution which it becomes redundant data, 
and the amount of data increases, and minds a network, it is not desirable. On the 
other hand, distinction of a key position is attained by the small amount of data by 
using the tag mentioned above as index data in which a key position is shown. 
[0121] It returns to drawing 17 and an EKB format is explained further. Signature 
(Signature) 608 is electronic signature which published the validation key block (EKB) 
and which a key management center (license server 4), contents ROBAIDA (contents 
server 3). a settlement-of-accounts engine (accounting server 5), etc. perform, for 
example. It checks that the device which received EKB is the validation key block 
(EKB) which the just validation key block (EKB) publisher published by signature 
verification. 

[0122] When processing using the contents supplied from the contents server 3 is 
summarized based on the license supplied from the license server 4 as mentioned 
above, it comes to be shown in drawing'19 . 

[0123] That is. while contents are offered from the contents server 3 to a client 1, a 
license is supplied to a client 1 from a license server 4. Contents are enciphered by 
the contents key Kc (Enc (Kc. Content)), the contents key Kc is added to the 
contents which were enciphered by the root key KR (it is the key obtained from EKB 
and corresponds to the key KEKBC in drawing 5 ) (Enc (KR. Kc)). and were enciphered 
with EKB. and a client 1 is provided with it. 

[0124] As shown in drawing 20 , the root key KR enciphered by DNK is contained in 
EKB in the example of drawing 19 (Enc (DNK, KR)). Therefore, a client 1 can obtain the 
root key KR from EKB using DNK contained in service data. Furthermore, using the 
root key KR, the contents key Kc can be decoded from Enc (KR, Kc). and contents 
can be decoded from Enc (Kc, Content) using the contents key Kc. 
[0125] Thus, according to the principle explained with reference to drawing 12 and 
drawing 15 , RIBOKU (revoke) of each client 1 becomes possible by assigning DNK to 
a client 1 according to an individual. 

[0126] Moreover, by adding and distributing the license leaf ID. in a client 1, matching 
of service data and a license will be performed and it becomes possible to prevent the 
illegal copy of a license. 

[0127] Moreover, it also enables an end user to create the contents which can 
prevent an illegal copy by distributing the certificate and private key for clients as 
service data using these. 

[0128] About utilization of a certificate and a private key. it mentions later with 
reference to the flow chart of drawing 28 . 



[0129] In this invention, since T system which manages a license, and the category 
using various kinds of contents of a device are matched with a category node as 
explained with reference to drawing 13 . two or more DNK(s) can be given to the same 
device. Consequently, it becomes possible to manage the contents of a different 
category with one device. 

[0130] Drawing 21 expresses this relation. That is, based on T system, the license 
using contents 1 to which DNK1 is assigned is recorded on a device D1. Similarly, the 
contents 2 to which DNK2 was assigned and which carried out ripping to the memory 
stick from CD are recordable on this device D1. In this case, a device D1 becomes 
possible [ treating simultaneously contents which are called contents 1 and contents 

2 and which were distributed by different system (T system and device managerial 
system) ]. Such a thing cannot be performed, when assigning new DNK, and DNK 
already assigned is deleted and it is made to make only one DNK correspond to a 
device. 

[0131] Moreover, it becomes possible to classify the inside of the same category into 
small meetings, such as a genre of contents, a label, a dealer, and distribution service, 
and to manage it using a subcategory, by assigning the license category 1 and the 
license category 2 which are shown in each of three square shapes each of 32 lower 
hierarchies at drawing 22 . [ in / drawing 1 3 ] 

[0132] In the example of drawing 22 , the license category 1 belongs to the genre of 
jazz, and the license category 2 belongs to the genre of a lock, for example. License ID 
makes the contents 1 and contents 2 which are 1 correspond to the license category 
1 , and is distributed to the user 1 thru/or the user 3 at it, respectively. The contents 

3 of license ID 2, contents 4, and contents 5 are contained, and the user 1 and the 
user 3 are provided with the license category 2, respectively. 

[0133] Thus, in this invention, the key management which became independent for 
every category is attained. 

[0134] Moreover, DNK is beforehand embedded neither to a device nor media, but by 
the license server 4, in case registration processing is performed, the system which 
can purchase the key by the user can be realized by making it download to each 
device or media. 

[0135] After it is created, even if contents are carried out in what kind of usage, are 
concerned, they are not in the usage and it is desirable in all applications that it is 
usable. For example, also in a different contents distribution service or the domain in 
which service conditions differ, it is desirable that the same contents can be used. In 
this invention, for this reason, as mentioned above, the certificate (certificates) of a 



private key and the public key corresponding to it is distributed to each user (client 1) 
from the license server 4 as a certificate authority. Using the private key, each user 
can create a signature (signature), can add to contents, and can guarantee Shinsei 
(integrity) of contents, and can aim at alteration prevention of contents. 
[0136] The example of processing in this case is explained with reference to the flow 
chart of drawing 23 . Processing of drawing 23 explains the ripping processing a user 
makes [ processing ] the storage section 28 memorize [ processing ] the data 
reproduced from CD. 

[0137] First, in step SI 71, CPU21 of a client 1 incorporates the playback data of CD 
inputted through the communications department 29 as record data. In step SI 72, 
CPU21 judges whether the watermark is contained in the record data incorporated by 
processing of step SI 71. This watermark is constituted by the copy management 
information (CCD of a triplet, and the 1-bit trigger (Trigger), and is embedded in the 
data of contents. When a watermark is detected. CPU21 progresses to step 8173. and 
performs processing which extracts the watermark. When a watermark does not exist, 
processing of step 8173 is skipped. 

[0138] Next, in step 8174. CPU21 creates the data of the header recorded 
corresponding to contents. The data of this header are constituted by URL showing 
the access place for acquiring content ID. License ID, and a license, and the 
watermark. 

[0139] Next, it progresses to step 8175 and CPU21 creates the digital signature 
based on the data of the header created by processing of step SI 74 using its own 
private key. This private key is acquired from a license server 4 (step 867 of drawing 

z). 

[0140] CPU21 controls the encryption decode section 24 by step 8176. and contents 
are made to encipher by the contents key. A contents key is simultaneously acquired, 
when contents are acquired ( drawing 5 or drawing 19 ). 

[0141] Next, CPU21 makes data record on the magneto-optic disk 43 constituted with 
a mini disc etc. in step 8177 based on a file format. 

[0142] In addition, when a record medium is a mini disc, CPU21 supplies contents to 
the codec section 25, for example, makes contents encode with ATRAC3 method in 
step 8176. And the encoded data are further enciphered by the encryption decode 
section 24. 

[0143] Drawing 24 expresses typically the condition that contents were recorded on 
the record medium as mentioned above. The watermark (WM) extracted from the 
contents (E (At3)) enciphered is recorded out of contents (header). 



[0144] Drawing 25 expresses the more detailed configuration of the file format in the 
case of recording contents on a record medium. In this example Content ID (CID). 
License ID (LID) URL and the header containing a watermark (WM) are recorded, and 
also EKB, the data which enciphered the contents key Kc by the root key KR (Enc (KR, 
Kc)), A certificate (Cert), the digital signature generated based on the header (Sig 
(Header)), The data (Enc (Kc, Content)), the metadata (Meta Data), and the mark 
(Mark) which enciphered contents by the contents key Kc are recorded. 
[0145] Although the watermark is embedded to the interior of contents, as shown in 
drawing 24 and drawing 25 , the interior of contents is making it arrange in a header 
independently, and it becomes possible [ detecting the information currently 
embedded to contents as a watermark promptly and simply ]. Therefore, it can judge 
promptly whether the contents can be copied. 

[0146] In addition, metadata expresses data, such as a jacket a photograph, and 
words. About a mark, it mentions later with reference to drawing 31 . 
[0147] Drawing 26 expresses the example of the public key certificate as a certificate. 
A public key certificate is a certificate which the certificate authority (CA:Certificate 
Authority) in a public key cryptosystem publishes, a certificate authority adds 
information, such as an expiration date, and adds the digital signature by the 
certificate authority further, and is usually drawn up by self ID, public key. etc. which 
the user submitted to the certificate authority. In this invention, since a license server 
4 (or contents server 3) also publishes a certificate, a private key, therefore a public 
key, a user can get this public key certificate by providing a license server 4 with user 
ID, a password, etc.. and performing registration processing. 

[0148] A certificate user's public key is contained in the algorithm which used the 
public key certificate in drawing 26 for the version number of a certificate, the serial 
number of the certificate which a license server 4 assigns to the user (user) of a 
certificate, and a digital signature and a parameter, the identifier of a certificate 
authority (license server 4), the expiration date of a certificate, a certificate user's ID 
(Node ID or Leaf ID), and a list as a message. Furthermore, the digital signature 
created by the license server 4 as a certificate authority is added to this message. 
This digital signature is data generated using the private key of a license server 4 
based on the hash value generated with the application of the Hash Function to the 
message. 

[01 49] in the case of the example of drawing 12 , if Node ID or Leaf ID is a device 0, it 
will be set to "0000", if it comes out device 1, it will be set to "0001", and if it is a 
device 1 5, it will be set to "1111 ." Based on such ID, it is identified whether the device 



(entity) is the entity located in which location (a leaf or node) of a tree configuration. 
[0150] Thus, distribution of contents will be freely performed by dissociating and 
distributing a license required using contents with contents. The contents which came 
to hand in the approach of arbitration or the path can be dealt with unitary. 
[0151] Moreover, of course, when distributing the contents of the format through the 
Internet with constituting a file format as shown in drawing 25 . when providing for an 
SDMI (Secure Digital Music Initiative) device, it becomes possible to manage the 
copyright of contents. 

[01 52] Furthermore, for example, as shown in drawing 27 , even if contents are offered 
through a record medium, even if it is provided through the Internet 2, the same 
processing enables it to check out to predetermined PD (Portable Device) as an SDMI 
(Secure Digital Music Initiative) device etc. 

[0153] Next, with reference to the flow chart of drawing 28 , processing in case a 
client 1 checks out contents to other clients (for example, PD) is explained. 
[0154] First, in step SI 91. CPU21 judges whether the digital signature is added to 
contents. When judged with the digital signature being added, it progresses to step 
SI 92, and CPU21 extracts a certificate and performs processing verified with the 
public key of a certificate authority (license server 4). That is. a client 1 acquires the 
public key corresponding to the private key of a license server 4 to the license server 
4. and decodes the digital signature added to the public key certificate with the public 
key. As explained with reference to drawing 26 , the digital signature is generated 
based on the private key of a certificate authority (license server 4), and can be 
decoded using the public key of a license server 4. Furthermore, CPU21 calculates a 
hash value with the application of a Hash Function to the whole message of a 
certificate. And if CPU21 compares the calculated hash value with the hash value 
which decoded the digital signature and was obtained and both corresponds, a 
message will judge with it not being what was altered. When both are not in agreement, 
it will be said that this certificate is altered. 

[0155] Then, in step SI 93, when judged with whether the certificate is altered and or 
not judging CPU21 and not being altered, it progresses to step SI 94 and processing 
which verifies a certificate by EKB is performed. This verification processing is 
performed by investigating whether EKB can be followed or not based on the leaf ID 
( drawing 26 ) contained in a certificate. This verification is explained with reference to 
drawing 29 and drawing 30 . 

[0156] Now. as shown in drawing 29 . suppose that it is the device [ RIBOKU / device 
/ the device which has the leaf key K1001 ]. At this time. EKB which has data 



(cryptographic key) as shown in drawing 30 , and a tag is distributed to each device 
(leaf). This EKB is EKB which updates keys KR. K1. KIO. and K100. in order RIBOKU 
[ the device "1001" in drawing 29 ]. 

[0157] All leaves other than a RIBOKU device "1001" can acquire updated root key 
K(t) R. That is, since the leaf which stands in a row in the low order of the node key KO 
holds in a device the node key KO which is not updated, it can acquire updating root 
key K(t) R by decoding a cryptographic key Enc (KO, K(t) R) by the key KO. 
[0158] Moreover, the leaf not more than node key K1 1 can acquire updating node key 
K(t)1 using the node key K1 1 which is not updated by decoding Enc (K1 1, K(t)1) by the 
node key K11. Furthermore, it becomes possible by decoding Enc (K (t)1, K(t) R) by 
node key K(t)1 to acquire updating root key K(t) R. Also about the low order leaf of the 
node key K101, it is possible to acquire updating root key K(t) R similarly. 
[0159] Furthermore, the device "1000" which has the leaf key [ RIBOKU / key ] 
K1000 can decode Enc (K1000, K(t)100) by the leaf key K1000 of self, can acquire 
node key K(t)100, using this, can carry out the sequential decode of the node key of a 
high order, and can acquire updating root key K(t) R further. 

[0160] on the other hand — RIBOKU — having had — a device — " — 1001 — " — 
self — a leaf — one — a step — a top — updating — a node — a key — K — ( — t 
— ) — 100 — EKB — processing — being unacquirable — since — after all — 
updating root key K(t) R — being unacquirable . 

[0161] EKB which has the data shown in drawing 30 and a tag is distributed and stored 
in the just device [ RIBOKU / device ] (client 1) from the license server 4. 
[0162] Then, each client can perform EKB trace processing using the tag. This EKB 
trace processing is processing which judges whether a key distribution tree can be 
followed from the root key of a high order. 

[0163] For example, "1001" which is ID (leaf ID) of the leaf "1001" of drawing 29 is 
grasped as 4 bits of "1", "0", "0", and "1", and it is judged one by one from the most 
significant bit whether a tree can be followed according to a lower bit. In this judgment, 
if a bit is 1, it will go to right-hand side, and if it is 0, processing which goes to 
left-hand side will be performed. 

[0164] Since the most significant bit of ID "1001" is 1, it goes to right-hand side from 
the root key KR of drawing 29 . It is judged with the tag (tag of a number 0) of the 
beginning of EKB being 0: {0, 0}, and being what has data on both branches. In this case, 
since it can go to right-hand side, it can arrive at the node key K1. 
[0165] Next, it progresses to the node of the low order of the node key K1. Since the 
2nd bit of ID "1001" is 0, it goes to left-hand side. The tag in which the tag of a 



number 1 expresses the existence of the data of the low order of the left-hand side 
node key KO. and the existence of the data of the low order of the node key K1 is 
shown is a tag of a number 2. As shown in drawing 30 . this tag shall be 2: {0. 0}, and 
shall have data on both branches. Therefore, it can go to left-hand side and can arrive 
at the node key K10. 

[0166] Furthermore, the 3rd bit of ID "1001" is 0 and goes to left-hand side. At this 
time, the tag (tag of a number 3) in which the existence of the data of the low order of 
K10 is shown is 3: {0, 0}, and is judged to be what has data on both branches. Then, it 
can go to left-hand side and can arrive at the node key K100. 

[0167] Furthermore, the least significant bit of ID "1001" is 1, and goes to right-hand 
side. The tag which the tag of a number 4 corresponds to the node key K11, and 
expresses the sign of the data of the low order of K1 00 is a tag of a number 5. This tag 
is 5: {0, 1}. Therefore, data will not exist in right-hand side, consequently, arrive at a 
node "1001" ~ it is judged with there being nothing and the device of ID "1001" being 
the device which cannot acquire the updating root key by EKB, i.e., a RIBOKU device. 
[0168] On the other hand, for example, the device ID which has the leaf key K1000 is 
"1000", and like the case where it mentions above, if EKB trace processing based on 
the tag in EKB is performed, it can arrive at a node "1000." Therefore, it is Judged with 
the device of ID "1000" being a Just device. 

[0169] It returns to drawing 28 . and when RIBOKU [ CPU21 Judges RIBOKU / the 
certificate / based on verification processing of step SI 94 at step SI 95 and / the 
certificate ]. it progresses to step SI 96 and processing which verifies a digital 
signature with the public key contained in a certificate is performed. 
[01 70] That is, as shown in drawing 26 , a certificate user's (contents implementer) 
public key is contained in the certificate, and the signature (Sig (Header)) shown in 
drawing 25 is verified using this public key. That is, by comparing the hash value which 
calculated the digital signature Sig (Header) with the application of the Hash Function 
to the data (hash value) decoded and obtained and Header shown in drawing 25 using 
this public key, if both are in agreement, it can check that Header is not altered. On 
the other hand, it will be said that Header is altered if both are not in agreement 
[0171] In step S197. if judge CPU21 and it is not altered [ whether Header is altered 
and or not ]. it progresses to step SI 98 and verifies a watermark. In step SI 99, CPU21 
judges whether he can check out or not as a result of verification of a watermark. 
When you can check out. it progresses to step S200 and CPU21 performs check-out. 
That is, contents are made to transmit and copy to the client 1 of a check-out place. 
[0172] When judged with a digital signature not existing in step SI 91. it sets to step 



S193. When Judged with the certificate being altered, it sets to step S195. When are 
judged with the certificate having been unverifiable by EKB and it is Judged with the 
header being altered in step SI 97 as a result of verification of a digital signature, Or in 
step S199, when Judged with prohibition of check-out being described by the 
watermark, it progresses to step S201 and error processing is performed. That is, 
check-out is forbidden in this case. 

[0173] Thus, it becomes possible by distributing a certificate and a private key to a 
user from a license server 4, and adding a digital signature to contents creation time 
to guarantee Shinsei of the implementer of contents. Thereby, the negotiation of 
inaccurate contents can be controlled. 

[0174] Furthermore, a watermark is detected to contents creation time, by ****** 
which gives the information to a digital signature, the alteration of watermark 
information can be prevented and Shinsei of contents can be guaranteed. 
[0175] Consequently, even if the contents created once are distributed with what kind 
of gestalt, they become possible [ guaranteeing Shinsei of the original contents ]. 
[0176] Furthermore, since contents do not have a service condition but the service 
condition is added to the license, it is changing the service condition within a license, 
and it becomes possible to change the service conditions of the contents related to it 
all at once. 

[0177] Next, the usage of a mark is explained. In this invention, as mentioned above, a 
service condition is added to the license instead of contents. However, an operating 
condition may change with contents. Then, in this invention, as shown in drawing 25 , a 
mark is added to contents. 

[01 78] Since a license and contents have the relation of one-pair **, it becomes 
difficult to describe each operating condition of contents only in the service condition 
of a license. Then, though management with a license is carried out by adding an 
operating condition to contents in this way, it becomes possible to manage each 
contents. 

[0179] As shown in drawing 31 , a user's ID (leaf ID), an ownership flag, 
beginning-of-using time of day, a count of a copy, etc. are described by this mark. 
[0180] Furthermore, the digital signature generated based on messages, such as Leaf 
ID, an ownership flag, beginning-of-using time of day, and a count of a copy, is added 
to a mark. 

[0181] An ownership flag is added when the license only whose predetermined period 
makes contents usable is bought as it was (when duration of service is changed 
eternally). Beginning-of^using time of day is described when the activity of contents 



is started within a predetermined period. For example, when the stage to download 
contents is restricted and download is performed within the length, the time which 
downloaded contents actually is described here. Thereby, it is proved that it is an 
effective activity within a period. 

[0182] The count which resembled the count of a copy till then and copied the 
contents to it is described as hysteresis (log). 

[0183] Next, when a user buys a license with reference to the flow chart of drawing 
32 , the processing which adds a mark is explained as an example which adds a mark 
to contents. 

[0184] First in step S221, CPU21 accesses a license server 4 through the Internet 2 
based on a command of the user from the input section 26. 

[0185] In step S222, CPU21 incorporates the input through the input section 26 from 
a user, and requires acquisition of a license from a license server 4 corresponding to 
the input. 

[0186] Corresponding to this demand, a license server 4 presents a countervalue 
required in order to buy a license so that it may mention later with reference to the 
flow chart of drawing 33 (step S242 of drawing 33 ). Then, in step S223. CPU21 of a 
client 1 will output and display this on the output section 27. if presentation of the 
countervalue from a license server 4 is received. 

[0187] A user judges whether based on this display, it consents to the shown 
countervalue, and inputs that decision result from the input section 26 based on that 
decision result. 

[0188] When it judges with CPU21 having judged and consented whether to have 
consented to the countervalue shown the user in step S224 based on the input from 
the input section 26, it progresses to step S225 and processing which notifies consent 
to a license server 4 is performed. 

[0189] If this advice of consent is received, a license server 4 will transmit the 
information showing acquisition of a countervalue, i.e., the mark which described the 
ownership flag, (step S244 of drawing 33 ). Then, in step S226, CPU21 of a client 1 will 
perform processing which embeds the received mark to contents in step S227, if the 
mark from a license server 4 is received. That is, the mark the ownership flag as 
shown in drawing 31 was described to be will be recorded as a mark of the contents 
corresponding to the bought license by this corresponding to contents. Moreover, 
since it means that, as for CPU21. the message was updated at this time, a digital 
signature ( drawing 25 ) is also updated and it records on a record medium. 
[0190] In step S224, when judged with not consenting to the countervalue shown from 



the license server 4, it progresses to step S228 and CPU21 notifies not consenting to 
the shown countervalue to a license server 4. 

[0191] Corresponding to processing of such a client 1, a license server 4 performs 
processing shown in the flow chart of drawing 33 . 

[0192] That is, CPU21 of a license server 4 is first, when the demand of license 
acquisition is transmitted from a client 1 in step S241 (step S222 of drawing 32 ), A 
countervalue required for the acquisition by the target license in reception and step 
S242 of this is read from the storage section 28, and this is transmitted to a client 1. 
[0193] As mentioned above, advice of whether to consent to the countervalue shown 
from the client 1 to the countervalue shown by doing in this way is transmitted. 
[0194] Then, the mark containing the message which progresses to step S244 and 
expresses the acquisition by the target license is generated, when it judges with 
having received advice of consent, it judges whether in step S243, CPU21 of a license 
server 4 received advice of consent from the client 1 , it is its own private key and a 
digital signature is added, and it transmits to a client 1. Thus, the transmitted mark is 
recorded on corresponding contents in the storage section 28 of a client 1, as 
mentioned above (step S227 of drawing 32 ). 

[0195] In step S243, when judged with advice of consent not being received from a 
client 1, processing of step S244 is skipped. That is, in this case, since it means that 
acquisition processing of a license was not performed eventually, a mark is not 
transmitted. 

[0196] Drawing 34 expresses the example of a configuration of the mark transmitted 
from a license server 4 to a client 1 in step S244. The mark is constituted in this 
example by digital signature Sigs (LeafID, Own) generated by that user's leaf ID, the 
ownership flag (Own), and the list in Leaf ID and the ownership flag based on the 
private key S of a license server 4. 

[0197] In addition, since this mark is effective, when it is copied in the target contents 
only to a specific user's specific contents, let the mark which accompanies those 
copied contents be an invalid. 

[0198] Thus, contents and a license are separated, and when making a service 
condition equivalent to a license, it becomes possible to realize service according to 
the operating condition of each contents. 

[0199] Next, grouping is explained. It is called grouping to collect two or more devices 
and media suitably, and to enable it to deliver and receive contents freely in the one 
set. Usually, this grouping is performed in the device and media which an individual 
owns. Although this grouping carried out setting up a group key for every group 



conventionally etc. and was performed.- it becomes possible [ carrying out grouping 
easily ] by matching the same license with two or more devices and media which carry 
out grouping. 

[0200] Moreover, it is also possible to carry out the grouping of each device by 

registering beforehand. The grouping in this case is explained below. 

[0201] In this case, a user needs to register into a server beforehand the certificate of 

the device made into a grouping object. Registration processing of this certificate is 

explained with reference to the flow chart of drawing 35 and drawing 36 . 

[0202] First, with reference to the flow chart of drawing 35 , registration processing of 

the certificate of a client (device used as a grouping object) is explained. In step S261, 

CPU21 of a client 1 draws up its own [ as a device made into the object of grouping ] 

certificate. Its own public key is contained in this certificate. 

[0203] Next, it progresses to step S262, CPU21 accesses the contents server 3 
based on the input from a user's input section 26. and processing which transmits the 
certificate drawn up by processing of step S261 to the contents server 3 is performed 
in step S263. 

[0204] In addition, as a certificate, what received from the license server 4 can also be 
used as it is. 

[0205] All the devices made into a grouping object perform the above processing. 
[0206] Next, with reference to the flow chart of drawing 36 . the registration 
processing of the certificate of the contents server 3 performed corresponding to 
registration processing of the certificate of the client 1 of drawing 35 is explained. 
[0207] First, in step S271. CPU21 of the contents server 3 will register the certificate 
into the storage section 28 in step S272, if the certificate transmitted from the client 
1 is received. 

[0208] The above processing is performed for every device made into a group object. 
Consequently, as shown in drawing 37 , the certificate of the device which constitutes 
the group is registered into the storage section 28 of the contents server 3 for every 
group. 

[0209] In the example shown in drawing 37 . a certificate C11 thru/or CI 4 are 
registered as a group's 1 certificate. The corresponding public key KP1 1 thru/or KP14 
are contained in these certificate C11 thru/or C14. 

[0210] Similarly, as a group's 2 certificate, a certificate C21 thru/or C23 are 
registered, and the public key KP21 with which these correspond thru/or KP23 are 
contained. 

[021 1] If offer of contents is required of the device which belongs to the group from a 



user in the condition which constitutes the above groups that the certificate was 
registered for every device, the contents server 3 will perform processing shown in 
the flow chart of drawing 38 . 

[0212] First in step S281. CPU21 of the contents server 3 performs processing which 
verifies the certificate which belongs to the group among the certificates memorized 
by the storage section 28. 

[0213] This verification processing is performed by following EKB using a tag based on 
the leaf ID contained in the certificate of each device, as explained with reference to 
drawing 29 and drawing 30 . EKB is distributed also to the contents server 3 from the 
license server 4. The certificate [ RIBOKU / certificate / this verification processing ] 
is excepted. 

[0214] In step S282, CPU21 of the contents server 3 chooses the confirmed 
certificate as a result of verification processing of step S281. And in step S283, 
CPU21 enciphers a contents key with each public key of the certificate of each 
device chosen by processing of step S282. In step S284, CPU21 transmits with 
contents the contents key enciphered by processing of step S283 to each device of 
the target group. 

[0215] Supposing RIBOKU [ the certificate CI 4 ] among the groups 1 shown in 
drawing 37 , encryption data as been processing of step S283, for example, shown in 
drawing 39 will be generated. 

[0216] That is, in the example of drawing 39 , the contents key Kc is enciphered with 
the public key KP1 1 of a certificate C1 1 . the public key KP12 of a certificate CI 2, or 
the public key KP13 of a certificate C13. 

[0217] Corresponding to processing as shown in drawing 38 of the contents server 3, 
the device (client) of each group who receives offer of contents performs processing 
shown in the flow chart of drawing 40 . 

[0218] First, in step S291. CPU21 of a client 1 receives the contents which the 
contents server 3 has transmitted by processing of step S284 of drawing 38 with a 
contents key. Contents are enciphered with the contents key Kc, and the contents 
key is enciphered with the public key which each device holds, as mentioned above 
( drawing 39 ). 

[0219] Then, in step S292, CPU21 decodes and acquires the contents key addressed 
to it with its own private key. [ who received by processing of step S291 ] And decode 
processing of contents is performed using the acquired contents key. 
[0220] For example, using its own [ corresponding to a public key KP1 1 ] private key, 
the device corresponding to the certificate C11 shown in the example of drawing 39 



decodes the code of the contents key Kc, and acquires the contents key Kc. And 
contents are further decoded using the contents key Kc. 

[0221] Same processing is performed also in the device corresponding to certificates 
CI 2 and C13. Since the contents key Kc enciphered using its own public key is not 
sent along with contents, the device of the certificate [ RIBOKU / certificate ] C14 
cannot decode the contents key Kc, therefore cannot decode contents using the 
contents key Kc. 

[0222] Although it was made to perform grouping above to the contents key (namely, 
contents), it is also possible to perform grouping to a license key (license). 
[0223] Grouping becomes possible, without using a special group key and ICV 
(Integrity Check Value) mentioned later as mentioned above. This grouping is fit for 
applying to a small-scale group. 

[0224] In this invention, it is supposed that it is possible to check out check in it at it, 
it, or to also copy a license. However, these processings are performed based on the 
rule defined by SDMI. 

[0225] Next, with reference to the flow chart of drawing 41 and drawing 42 . 
check-out processing of the license by such client is explained. 
[0226] First, processing of the client which checks out a license to other clients with 
reference to the flow chart of drawing 41 is explained. First, in step S301, CPU21 of a 
client 1 reads the count N1 of check-out of the license for check-out. Since this 
count of check-out is written in the service condition shown in drawing 8 , it is read in 
this service condition. 

[0227] Next, in step 8302. CPU21 reads, too the count N2 of the maximum check-out 
of the license for check-out in the service condition of a license. 
[0228] And in step 8303, CPU21 measures the count N1 of check-out read by 
processing of step 8301, and the count N2 of the maximum check-out read by 
processing of step 8302, and judges whether the count N1 of check-out is larger than 
the count N2 of the maximum check-out. 

[0229] When it judges that the count N1 of check-out is smaller than the count N2 of 
the maximum check-out, it progresses to step S304, and CPU21 acquires the leaf key 
of the equipment (client of a check-out place) of the other party from the equipment 
of partner each, and stores the leaf key in the check-out list of the storage section 28 
corresponding to the license ID now made applicable to check-out. 
[0230] Next, in step S305. only 1 increments the value of the count N1 of check-out 
of the license in which CPU21 was read by processing of step S301. In step S306, 
CPU21 calculates ICV based on the message of a license. About this ICV. it mentions 



later with reference to drawing 46 thru/or drawing 50 . It becomes possible to prevent 
the alteration of a license using ICV. 

[0231] Next, CPU21 enciphers using its own public key, and makes ICV calculated by 
the license for check-out. and processing of step S306 output and copy to the 
equipment of the other party with EKB and a certificate in step S307. Furthermore, 
CPU21 makes ICV calculated by processing of step S306 remember it to be the leaf 
key of other party equipment in the check list of the storage section 28 in step S308 
corresponding to License ID. 

[0232] In step S303, when it judges that the count Nl of check-out is not smaller than 
the count N2 of the maximum check-out (for example, equal), since check-out is 
performed, only the count already permitted cannot check out any more. Then, it 
progresses to step S309 and 0PU21 performs error processing. That is, check-out 
processing will be performed in this case. 

[0233] Next, with reference to the flow chart of drawing 42 , check-out processing of 
drawing 41 explains processing of the client which receives check-out of a license. 
[0234] First, in step S321. its own leaf key is transmitted to other party equipment 
(client 1 which checks out a license). This leaf key is memorized by the client of the 
other party in step S304 corresponding to License ID. 

[0235] Next, in step S322, CPU21 receives this, when the license and ICV which were 
enciphered from the client 1 of the other party have been transmitted with EKB and a 
certificate. That is, this license, ICV and EKB, and a certificate are transmitted from 
the equipment of the other party by processing of step S307 of drawing 41 . 
[0236] CPU21 makes the storage section 28 memorize the license, ICV and EKB, and 
the certificate which were received by processing of step S322 in step S323. 
[0237] When using the license from which the carrier beam client 1 received 
check-out for check-out of a license as mentioned above and reproducing 
predetermined contents, processing shown in the flow chart of drawing 43 is 
performed. 

[0238] That is, in step S341, CPU21 of a client 1 calculates first ICV of the contents 
as which playback was specified by the user through the input section 26. And CPU21 
makes ICV which is memorized by the storage section 28 and which is enciphered 
decode in step S342 based on the public key contained in the certificate. 
[0239] Next, in step S343. CPU21 judges whether ICV now calculated by processing 
of step S341 and ICV which reading appearance was carried out [ ICV ] by processing 
of step S342, and was decoded are in agreement. The license will be altered when 
both are in agreement. Then, it progresses to step S344 and CPU21 performs 



processing which reproduces corresponding contents. 

[0240] On the other hand, in step S343, when judged with two ICV(s) not being in 
agreement, a license has a possibility that it may be altered. For this reason, it 
progresses to step S345 and CPU21 performs error processing. That is. at this time, 
contents can be reproduced using that license. 

[0241] Next, processing of the client which receives checkHn of the license once 
checked out to other clients as mentioned above is explained with reference to the 
flow chart of drawing 44 . 

[0242] First, in step S361, CPU21 acquires the leaf key of the equipment (client 1 
which returns a license (check-in)) of the other party, and ID of the license for 
check-in. Next, in step S362, he judges whether CPU21 is the license which the 
license for [ which was acquired at step S361 ] check-in checked out to other party 
equipment. This judgment is performed based on ICV memorized by processing of step 
S308 of drawing 41 . a leaf key, and . License ID. That is. when it is judged and 
memorized whether the leaf key acquired at step S361 and Licenses ID and ICV are 
memorized during the check-out list, it is judged with it being the license which he 
checked out. 

[0243] When he checks [ a license ] out. in step S363, CPU21 requires deletion of the 
license of the equipment of the other party, EKB. and a certificate. Based on this 
demand, the equipment of the other party performs deletion of a license, EKB, and a 
certificate so that it may mention later (step S383 of drawing 45 ). 
[0244] In step S364, since the once checked-out license has checked in at CPU21 
again, only 1 carries out the decrement of the count N1 of check-out of the license. 
[0245] In step S365, it judges whether CPU21 has checked out other licenses to the 
equipment of the other party, and when other licenses which he has still checked out 
do not exist, it progresses to step S366 and CPU21 deletes the storage in the 
check-out list as a device for check-in of the equipment of the other party. On the 
other hand, in step S365, since check-in of other licenses may be received when 
judged with other licenses which he has checked out to the equipment of the other 
party existing, processing of step S366 is skipped. 

[0246] In step S362. when it judges that the license made applicable to check-in is not 
a license which he checked out to other party equipment, CPU21 progresses to step 
S367, and performs error processing. That is. in this case, since it will not be the 
license he has jurisdiction [ license ], check-in processing is not performed. 
[0247] when a user copies a license unjustly, the value of ICV memorized differs from 
the value of ICV calculated based on the license acquired by processing of step S361 



— he can come out and check in. 

[0248] Drawing 45 expresses processing of the client at which the license which he 
has is made to check in to the client* which performs check-in processing of the 
license shown in the flow chart of drawing 44 . 

[0249] In step S381, CPU21 of a client 1 transmits ID of the license a leaf key and for 
check-in to the equipment (client 1 which performs processing shown in the flow 
chart of drawing 44 ) of the other party. As mentioned above, in step S361, the 
equipment of the other party acquires this leaf key and License ID, and performs 
authentication processing of the license for check-in in step S362 based on it. 
[0250] In step S382, CPU21 of a client 1 judges whether deletion of a license was 
required from the equipment of the other party. Namely, when a license is a license for 
[ just ] check-in, as mentioned above, as for the equipment of the other party, 
deletion of a license, EKB, and a certificate is required by processing of step S363. 
Then, when this demand is received, it progresses to step S383 and CPU21 deletes a 
license, EKB, and a certificate. That is. since DEKURIMENDO [ this client 1 will be in 
the condition that that license cannot be used henceforth and / processing of step 
S364 of drawing 44 / the count N1 of check-out / 1 ], it means that check-in was 
completed by this. 

[0251] In step S382. when Judged with deletion of a license not being demanded from 
the equipment of the other party, it progresses to step S384 and error processing is 
performed. That is, check-in will not be possible for the reasons of the values of ICV 

differing in this case. 

[0252] Although check-in and check-out were explained above, it is possible similarly 
to make it also make a license MUBU [ copy or ]. 

[0253] Next, in order to prevent the alteration of a license (the same is said of 
contents), the integrity check value (ICV) of a license is generated, and it matches 
with a license, and count of ICV explains the processing configuration which judges 
the existence of a license alteration. 

[0254] The integrity check value (ICV) of a license is calculated using the Hash 
Function to a license, and is calculated by ICV=hash (Kiev. LI and L2, ...). Kiev is an 
ICV generation key. L1 and L2 are the information on a license, and the message 
authenticator (MACiMessage authentication Code) of the critical information of a 
license is used. 

[0255] The example of MAC value generation using a DES cipher-processing 
configuration is shown in drawing 46 . the (target message as shown in the 
configuration of drawing 46 — a 8-byte unit — dividing — the divided message is 



hereafter set to) Ml , M2, MN — the exclusive OR of Ml is first carried out to initial 
value (IV) by operation part 24-1 A (the result is set to 11). Next. II is put into DES 
encryption section 24-1 B. and it enciphers using a key (hereafter referred to as K1) 
(an output is set to El). Continuously, the exclusive OR of El and M2 is carried out by 
operation part 24-2A, the output 12 is put in to DES encryption section 24-2B, and it 
enciphers using a key K1 (output E2). Hereafter, this is repeated and encryption 
processing is performed to all messages. EN which appeared from DES encryption 
section 24-NB in the last serves as a message authenticator (MAG (Message 
Authentication Code)). 

[0256] The integrity check value (ICV) of a license is generated by the MAC value and 
ICV generation key of such a license with the application of a Hash Function. For 
example, if it will be guaranteed that there is no alteration in a license if ICV generated 
to the license generate time is compared with ICV newly generated based on the 
license and the same ICV is obtained, and ICV(s) differ, it will be judged with there 
having been an alteration. 

[0257] Next, the configuration which sends Kiev which is the integrity check value 
(ICV) generation key of a license by the above-mentioned validation key block is 
explained. That is. it is the example used as the integrity check value (ICV) generation 
key of a license of the encryption message data based on EKB. 

[0258] When a license common to two or more devices is sent to drawing 47 and 
drawing 48 , the example of a configuration which distributes the integrity check value 
generation key Kiev for verifying the existence of an alteration of those licenses by 
the validation key block (EKB) is shown. Drawing 47 shows the example which 
distributes the check value generation key Kiev which can be decoded to devices 0, 1, 
2, and 3, and drawing 48 shows the example which carries out RIBOKU (abatement) of 
devices 0, 1, and 2 and the device 3 in three, and distributes the check value 
generation key Kiev which can be decoded only to devices 0, 1, and 2. 
[0259] drawing 47 — an example — **** — updating — a node — a key — K — ( — 
t — ) — 00 — a check — a value — generation — a key — Kiev — having enciphered 

— data — Enc (K (t) 00 Kiev) — a device — zero — one — two — three — setting 

— each — having — a node — a key — a leaf — a key — using — updating — having 
had — a node — a key — K — ( — t — ) — 00 — decode — being possible — 
validation — a key block (EKB) — generating — distributing . each — a device — 
drawing 47 — right-hand side — being shown — as — first — EKB — processing 
(decode) — carrying out — things — updating — having had — a node — a key — K 

— ( — t — ) — 00 — acquiring — next — having acquired — a node — a key — K — 



( — t — ) — 00 — using — enciphering — having had — a check — a value — 
generation — a key — Enc (K (t) 00 Kiev) — decoding — a check — a value — 
generation — a key — Kiev — obtaining — things — being possible — ** — 
becoming . 

[0260] others — a device — four — five — six — seven ... being the same — 
validation — a key block (EKB) — receiving — even if — self — holding — a node — 
a key — a leaf — a key — **** — EKB — processing — updating — having had — a 
node — a key — K — ( — t — ) — 00 — being unacquirable — since — a safely Just 
device — only receiving — a check value generation key — it can send . 
[0261] On the other hand, the example of drawing 48 is other groups' member, i.e., the 
example which generated and distributed the validation key block (EKB) which can be 
decoded only to devices 0, 1, and 2, noting that RIBOKU (abatement) of the device 3 
is carried out by leakage of a key in the group enclosed with the dotted-line frame of 
drawing 12 . The data Enc (K (t) 00 Kiev) which enciphered the check value generation 
key (Kiev) as the validation key block (EKB) shown in drawing 48 by the node key (K (t) 
00) are distributed. 

[0262] The decode procedure is shown in the right-hand side of drawing 48 . Devices 
0, 1, and 2 acquire an updating node key (K (t) 00) from the received validation key 
block first by decode processing using the leaf key or node key which self holds. Next, 
the check value generation key Kiev is acquired by the decode by K(t)00. 
[0263] other groups' devices 4. 5. and 6 shown in drawing 1 2 — even if ... receives this 
same data (EKB), an updating node key (K (t) 00) is unacquirable using the leaf key 
and node key which self holds. Also in the device [ RIBOKU / device / similarly ] 3, by 
the leaf key and node key which self holds, an updating node key (K (t) 00) cannot be 
acquired, but only the device which has just access becomes possible [ decoding and 
using a check value generation key ]. 

[0264] Thus, if delivery of the check value generation key using EKB is used, it will 
become possible to distribute the check value generation key whose decode lessened 
the amount of data and only the just rightful claimant enabled at insurance. 
[0265] The illegal copy of EKB and an encryption license can be eliminated by using 
the integrity check value (ICV) of such a license. For example, as shown in drawing 49 
A. there are media 1 which stored the license LI and the license L2 with the validation 
key block (EKB) which can acquire each license key, and the ease where this is copied 
to media 2 as it was is assumed. The copy of EKB and an encryption license will be 
possible and can use this with the device which can decode EKB. 
[0266] In the example shown in drawing 49 B. it considers as the configuration which 



matches with the license Justly stored in each media, and stores an integrity check 
value (ICV (LI. L2)). In addition, (ICV (L1. L2)) shows ICV=hash (Kiev. LI. L2) which is 
the integrity check value of the license calculated by using a Hash Function for 
license LI and license L2. In the configuration of drawing 49 B. license 1 and license 2 
are justly stored in media 1, and the integrity check value (ICV (L1. L2)) generated 
based on the license LI and the license L2 is stored in them. Moreover, license 1 is 
justly stored in media 2, and the integrity check value (ICV (LI)) generated based on 
the license LI is stored in them. 

[0267] In this configuration, supposing it copies {EKB and license 2} which were stored 
in media 1 to media 2, unlike Kiev (LI) which ICV (LI, L2) will be generated and is 
stored in media 2 by media 2 if a license check value is newly generated, it will become 
clear that storing of the new license by an alteration or the unjust copy of a license 
was performed. In the device which reproduces media, an ICV check is performed to 
the step before a playback step, and coincidence of Generation ICV and Storing ICV is 
distinguished, and when not in agreement, it becomes possible to prevent playback of 
a license of an illegal copy by considering as the configuration which does not perform 
playback. 

[0268] Furthermore, in order to raise safety, it is good also as a configuration 
generated based on the data which rewrote the integrity check value (ICV) of a 
license and include a counter. That is, it considers as the configuration calculated by 
ICV=hash (Kiev, counter+1, LI and L2, ...). Here, a counter (counter+1) is set up as a 
value by which one increment is carried out for every rewriting of ICV. In addition, a 
counter value needs to consider as the configuration stored in secure memory. 
[0269] Furthermore, in the configuration which cannot store the integrity check value 
(ICV) of a license in the same media as a license, it is good also as a configuration 
which stores the integrity check value (ICV) of a license on media with an another 
license. 

[0270] For example, when it stores a license in the media by which copy preventive 
measures, such as the ReadOnly media and the usual MO, are not taken, if an integrity 
check value (ICV) is stored in the same media, rewriting of ICV may be made by the 
inaccurate user, and there is a possibility that the safety of ICV cannot be maintained. 
In such a case, safe management of ICV and the alteration check of a license are 
attained by storing ICV in the safe media on a host machine, and considering as the 
configuration which uses ICV for copy control (for example, check-in/check-out, 
move) of a license. 

[0271] This example of a configuration is shown in drawing 50 . In drawing 50 , it is the 



example which the license 1 thru/or the license 3 were stored in the media 2201 by 
which copy preventive measures, such as the ReadOnly media and the usual MO, are 
not taken, stored the integrity check value (ICV) about these licenses in the safe 
media 2202 on the host machine with which it is not permitted that a user accesses 
freely, and prevented rewriting of the unjust integrity check value (ICV) by the user. 
As such a configuration, in case the device equipped with media 2201 performs 
playback of media 2201, it can prevent playback of PC which is a host machine, the 
configuration which performs the check of ICV in a server and judges reproductive 
propriety then an unjust copy license, or an alteration license. 

[0272] The client to which this invention is applied can be used as PDA (Personal 
Digital Assistants), a portable telephone, a game terminal, etc. in addition to the 
so-called personal computer. 

[0273] When performing a series of processings with software, the program which 
constitutes the software is installed in a general-purpose personal computer etc. from 
a network or a record medium possible [ performing various kinds of functions ] by 
installing the computer built into the hardware of dedication, or various kinds of 
programs. 

[0274] As this record medium is shown in drawing 2 , apart from the body of 
equipment, are distributed in order to provide a user with a program. The magnetic 
disk 41 (a floppy disk is included) with which the program is recorded, an optical disk 
42 (CD-ROM (Compact Disk-ReadOnly Memory) — ) DVD (Digital Versatile Disk) is 
included. It is not only constituted by the package media which consist of a 
magneto-optic disk 43 (MD (Mini-Disk) is included) or semiconductor memory 44, but 
It consists of ROM22 with which a user is provided in the condition of having been 
beforehand included in the body of equipment and on which the program is recorded, a 
hard disk contained in the storage section 28. 

[0275] In addition, in this description, even if the processing serially performed in 
accordance with the sequence that the step which describes the program recorded on 
a record medium was indicated is not of course necessarily processed serially, it is a 
juxtaposition thing also including the processing performed according to an individual. 
[0276] Moreover, in order for the program which performs processing relevant to 
security to prevent analyzing the processing, it is desirable to encipher the program 
itself. For example, the processing which performs cipher processing etc. can 
constitute the program as a tamper REJISUTANTO module. 

[0277] Moreover, since the license which carries out utilization authorization of the 
contents is specified, the information indicated by the header of contents may not be 



the license ID which identifies a license uniquely. It is the information which specifies 
the license to utilization of contents to be licensed [ ID ] in the above-mentioned 
example, and a certain license is the information which specifies the contents which 
permit utilization, and it is the information which identifies the license demanded by 
license demand from a client 1. The list of the various attribute information about the 
contents of contents is indicated by contents, and you may make it indicate with a 
license the conditional expression of the contents in which utilization authorization is 
carried out by the license. In this case, the attribute information included in contents 
is the information which specifies the license to which utilization of those contents is 
permitted, and the conditional expression contained in a license is the information as 
which that license specifies the contents which permit utilization, and serves as 
information from which License ID discriminates a license uniquely. When it does in 
this way, it becomes possible to match two or more licenses with one contents, and a 
license can be published flexibly. 

[0278] Moreover, in this description, a system expresses the whole equipment 

constituted by two or more equipments. 

[0279] 

[Effect of the Invention] It enables it to distribute freely the data which were 
enciphered according to the program to the information processor of this invention 
and an approach, a license server, and a list like the above, and by having enabled it to 
use contents by acquiring a license separately, without barring the negotiation of 
contents, copyright can be protected and suitable dues can be collected. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram showing the contents offer structure of a system 
which applied this invention. 

[Drawing 2] It is the block diagram showing the configuration of the client of drawing 1 . 
[Drawing 3] It is a flow chart explaining download processing of the contents of the 
client of drawing 1 . 

[Drawing 4] It is a flow chart explaining contents offer processing of the contents 
server of drawing 1 . 

[Drawing 5] It is drawing showing the example of the format in step 826 of drawing 4 . 
[Drawing 6] It is a flow chart explaining contents regeneration of the client of drawing 
1. 

[Drawing 7] It is a flow chart explaining the detail of license acquisition processing of 
step S43 of drawing 6 . 

[Drawing 8] It is drawing showing the configuration of a license. 

[Drawing 9] It is a flow chart explaining processing of license offer of the license 
server of drawing 1 . 

[Drawing 10] It is a flow chart explaining the detail of the license update process in 
step S45 of drawing 6 . 

[Drawing 11] It is a flow chart explaining a license update process of the license 
server of drawing 1 . 

[Drawing 12] It is drawing explaining the configuration of a key. 
[Drawing 13] It is drawing explaining a category node. 

[Drawing 14] It is drawing showing the example of a response of a node and a device. 

[Drawing 15] It is drawing explaining the configuration of a validation key block. 

[Drawing 16] It is drawing explaining utilization of a validation key block. 

[Drawing 1 7] It is drawing showing the example of a format of a validation key block. 

[Drawing 18] It is drawing explaining the configuration of the tag of a validation key 

block. 

[Drawing 1 9] It is drawing explaining decode processing of the contents using DNK. 
[Drawing 20] It is drawing showing the example of a validation key block. 
[Drawing 21] It is drawing explaining the assignment to one device of two or more 
contents. 

[Drawing 22] It is drawing explaining the category of a license. 
[Drawing 23] It is a flow chart explaining ripping processing of a client. 



[Drawing 24] It is drawing explaining the configuration of a watermark. 
[Drawing 25] It is drawing showing the example of a format of contents. 
[Drawing 26] It is drawing showing the example of a public key certificate. 
[Drawing 27] It is drawing explaining distribution of contents. 

[Drawing 28] It is a flow chart explaining check-out processing of the contents of a 
client. 

[Drawing 29] It is drawing explaining the example which follows the validation key 
block by the tag. 

[Drawing 30] It is drawing showing the example of a configuration of a validation key 
block. 

[Drawing 31] It is drawing explaining the configuration of a mark. 

[Drawing 32] It is a flow chart explaining license acquisition processing of a client. 

[Drawing 33] It is a flow chart explaining license acquisition processing of a license 

server. 

[Drawing 34] It is drawing showing the example of a configuration of a mark. 
[Drawing 35] It is a flow chart explaining registration processing of the certificate of a 
client. 

[Drawing 36] It is a flow chart explaining certificate registration processing of a 
contents server. 

[Drawing 37] It is drawing showing the example of a group's certificate. 

[Drawing 38] It is a flow chart explaining processing of a contents server in case 

grouping is performed. 

[Drawing 39] It is drawing showing the example of encryption of a contents key. 
[Drawing 40] It is a flow chart explaining processing of the client belonging to a group. 
[Drawing 41] It is the flow chart which explains to other clients processing of the 
client which checks out a license. 

[Drawing 42] It is a flow chart explaining processing of the client which receives 
check-out of a license from other clients. 

[Drawing 43] It is the flow chart which explains regeneration of a carrier beam client 
for check-out of a license. 

[Drawing 44] It is a flow chart explaining processing of the client which receives 
check-in of a license from other clients. 

[Drawing 45] It is the flow chart which explains to other clients processing of the 

client which checks in at a license. 

[Drawing 46] It is drawing explaining generation of MAC. 

[Drawing 47] It is a flow chart explaining decode processing of an ICV generation key. 



[Drawing 48] It is drawing explaining other decode processings of an ICV generation 
key. 

[Drawing 49] It is drawing explaining management of the copy of the license by ICV. 
[Drawing 50] It is drawing explaining management of a license. 
[Description of Notations] 

The 1-1 and 1-2 input section, 27 output section, the 28 storage section, the 29 
communications department Client 2 Internet 3 Contents server 4 License server 5 
Accounting server 20 Timer 21 CPU 24 Encryption decode section 25 Codec section 
26 
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^fflv>T«^^fnrc8fifB3yxy^y+-j&ffli/^TMiBB| 
mfsnrcayTy^yy-'~^^m^t?>ct^mwitt 
^m^m 4 iB^o'if ffisaasSo 

[^««6] MI37^'-byx«Mfi:. SM^'i'-feyx 

mmm^-Bvc trn'^tt^m^m i iB^oit s 
mmmo 

[fl^^7] HufB^i'-tyxttEti:. ^-r-byx-y- 

tm^m 1 iBmcDttWiSBo 

MIB^^-feyxg^tiMfc. 4S*iiBiJ'ff«IB 
1i¥ISicf B1i$ tiT V ^ § 15! B4S*iiSiJ'ifg^^^^. 
MIB^M^atc J: t) tifcMsB^^-b y XfiMtc. 
tufB4S*iiSiJ'lf$g^^^> 

milB*iJ^*St±. BulB^-r-feyxtc-tsn^mifBa^MS 

sim^i:HuSBffi*isiS'migSBii¥mcfaii?nTv^5M 

mK). a^v^H2yx^sfifB:3yry^ycDfiJffl;g:i^RlT' 

^^^-f'tyxxh^tm^r^^t^^mtt^m^ 

[11*319] y-^-tyX^imbXl'^Ht^^i^t 

bx:2yTyy(Dmmmt^'mmi3mh-:> 

X. 

aiSnyf y'y^?iJfflitpJt5tfitB^Y-byx^!f#^-r 
^rcisb(D5''<^y7.w^mmt. Bi^ftsnrcnyry 
^yr-^i:> 3y-ry^yx-^'^«%-r?.fca6icjg:^g* 

»Rfg^. ;&^?:fnyxy>y=lrfB1t-r§X-r-yyt. 
S^^-r -tr yxfc j; o T^iJffll^BlSn?. fulB^ yf- y-y 
^!|f ^-r ^rcisb<Da y T y -y itS'lf $g%#t? y x 
^IBii-r5Xx>y:^i:. 

tgiBn y r y ^y >&f iJfflf^ Rj-r § ^ ^i^"-?- 1 5 y x 
;6mB^ -tr y xiBis^ stciaiis nr 5 w 

tulBliM^IStc J: D 9^-tyX:^)^~|B1i5nTV^§ ^WKt 
ZntzL. t^m^t UTmifB:3 yry^yonyfy^yr 

[||*3lio] ^'{'^yx^imLXh'^nt^^i^ 
i: LT n yr y ^y ^grfFRf-r § iaa^ :3 y If a - ^ 

S 1^ 3 y r y ^y ijffl 1^ Pit § *u sB ^ Y -b y X ^#^-r 
i./ci6<7)^^-tryX!|fS'»?Si:. Hl^fk^nfcny-ry 
^ i: . 3 y T y ^y 7^-^ ^^^t § fc46tc-i;NS^: 
«1f«i;, ^-^tsayy^yy^imt^Xf-yft. 
3 7 -r -fe y X fc j; o T f ijffl 1^ bJ S n ^ tut a n y r y >y 
^^Mt^rc)sb(D::iyf-yy^^'&'\nn^^tsy'<^yx 

BuiBnyxy^y^fijfflfFRi-r-s ii i:*^-e#§7'i'-feyx 
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[11^^12] ^lyryymmmW^y^^y lo 

a ^ ^ -tr y X J; o T f iJ ffl It nJ ^ n 5 Mf B 3 y X y >y 

:^m.mtm^mmmm^^tsmm^-<-^y^^imt 
^y^-tyxmm^mtmmm^mti^^mm^tirc. 

^ ^ -tr y X^isSiJ-r 5 ^ ^ -tr y XilSiJIf «^^tf ^-r-b 

y7.s>!^^^int^^mmt. 
tfil27-r-tyxs*(c#$n5MIB7-r-tyxiisiJifSi 
5 SuiB7 ^ -tr y x^SrMsB^-r -b yxien^S*^ 

eaaj-rsaiij^si:. 20 

fijlBttm^lSf^J; oaaiSn/cMIB^Y-tryXfcMfBS 

^-f-feyx-'t-^^cD^m^^fflv^T. tuiB^aa^isfcj; 

iu IB^^ ^ ©tc i D a^i $ nfc ^ -b y X ^tij sB ^ -b 
yxSjK^jMMLfctfMiSatcJ^ff-rsjMfi^ISi: 

5 ii i: -r § ^ -b y X +>■-/ ^„ 

[fl*3Ri3] ayT-yyoymm^ffoIt^^-r-by 

X^fgfT-r^tfWlT^a-efeoT. 30 

a^^-r-byx{c<fe-pTWfflitni$n§ti(lBnyry^y 
*isSfji-5«*iis'mfB%#tfMBBv^-byx^ieii-r 

-b yxiisuitii^^Cf ^-f-fe yxs^^gfi-r s xx 

BuHB^^-byxS^tc-^^n-StulB^^-byxliSiJ'Iffg 
fC)t>f)St^MI27-r-byx%MIBv-i'-byxfB1i^S*^ 
?>ttttit§xx-y:/i:. 40 
MfBttm^Sf;: j; »3 ttm^n/iHusB^-r-b yXicMIB^ 

7'i'-byx-9--/^©^Mii^fflv>T> MfBsaa^iatj; 
0 s*iisyffifs^f^*p$n/'c^^-b yxtc«?g«^{^ 

mmm^^ma. ^^m^-^tirc^-f-byx^mti^^-t 
[Ii^jai4] uyy-yy(Dpm^^^t^'7-f-ty 

X^^tT-r^«!La«ia^3ytfa-^{C^tT^HJ5^a 50 
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^^l^^-r -b yx{c J: o Tf iJfflftnr$n?.MfB3 yf- y 
*ii8iJ-r54ig*i88'J1f$8*#tyMI37Y-tyXJg-|31fr 

-b y xieSiJ'tf Ig^^tJ ^ ^ ■b y xS^^^iH-r Xx 

tijf 37 ^ -b yxs^fc#$ tijIB^ -b yxi!gij1f IB 
l<:)t>fjS-r Sm)IB5i'-b yx^MIB^i'-b yxiBH^©*^ 
e.ttaif-5Xxv:^i:, 

tfis3tttiJ#S{c cfc D tttH^n/iMIB^-r-byXfcMia* 

*iiSiJ'ff fS^i^tof S Xr >y ^ . 

7-r-byx-y— /^(DSfmii^fflv^Tv MsBMil^lStcj: 

oig^MS'mffi^^ip^nfc^^'-byxtcWi^g^^f^ 

iJOl-^Xr-y:/^;. 

SulBS^^Sfc i: 0 ^ n/c 9 '1' -b y X ^tuf 3^ -b 
yxS^^jM^LfclflBSQaSHtcJift-rSXr-y:^^ 
^ n y i£ a - (c^lf 2 -Its :''n if 

[0 0 0 1] 

U'Tjffi. ^-r-byx-tf-/^. MtffcT'n^'^AtcHL, 
Itic, g{t^i#*^?)^-l'•byx%s^tTv^:&v^ay■f y 

[0002] 

-eg^f=-^^Si^Lfe3yxrAA\'iis^nTv^5o 

[0 0 0 3] dCDcfc^^v'Xf ATii. ai^Wfcti. 1 

a— tf■A^■^yxy>y;&ISAL^ ny^y^y 
tcMt§^{tti#i±, ai'Ptii: LT(D=i yxy^yA^^n 

[0004] 

[fgHflA'!»)*bJ:ai:T5iiS] nyry^y<D 

[0 0 0 5] i$.^mt^(r)^ots.WSi\t.^J)-Xfs.^^rz. 
fctDT'^D. 3yry^y;?}^^iEtc?iJffl$n?>0^5|||{c 
Kiht S c: i: ^^t? S S i 9 tc-r 1 § o 

[0006] 



(4) 
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K'mrm'^m. t ^^tsa y^ yvmm'^ ^ly^y 

nm^m t . mm^mh^ 3 yf- yym^t § tc 

nbnayfy-ynj^wm^^tsy-^-^yT^^trnt^y 

X't^^^-tyxt)^^-f-tyx$i^^mic$imnxi^ 

y7.mimnx\^'^ tmm-^tircn t^^i^t 10 
yi^yycDayT^y^T'-'^'^m^-r^mn^mt^m 

[0 0 0 7] tffg^ilSKtiMfc. ^^-byx+f- /^{c 

^-('tyx^mmt^rzib(D^^-by7.m.mm^^ts 
^-(■ty:^^^^mmt^mm^mt. 

[0 0 0 8] nyry^yr-^a-r^X hr-^^. Hfi 

^b^fcT-^xhiQ. m^m^^^mtntcay 

Ty^yT-'^^n^tm±^m:^Kmx^i.r>Kt 

^Ctt'^X^^o 

[0 0 0 9] HtflgtiEKB (Enabling Key Block) 

xy - K+-HBii#iatcfati$nTt.^i.xV^^xy - h 

+-%ffll/^TEKB (EnablingKey Block) ^^^SaSUff 
[0 0 10] SI'IflSiiMtCEKB (Enabling Key Block) 

^9^, n yTyyf- ^xx-nyryv^-K^yy Ht^{b$ 

fi?nTV>5x/Wxy-K^-%ffll/>TEKB (Enablin 

g Key Block) ^'^A^>m^.%^^fO\^-V^-^^^^ 

x>>yr-^^«^-r§<t^{c-r§ci;A^T-t§o 
[0 0 1 1] ^-f-feyxaMf;:. ^(D^-f-byxtcto 
TfJfflnJtgii^Snyry^ytD^ffl^ff^^-ri^ffl^ff 40 

[0 0 12] v-r-bvxtiMtc, ^-r-byx-9--/^coS} 

[0 0 13] mmmmmM. MtcitwiaB^iisij 
m^^x\.^'^mmmm:^H. gia^atc j; osfi 

gt*. ^^•tyx{c^$n5«*IS»migi:«*^8iJ1f 50 
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mummm^-^icvx\^^^%m\'m.iLit)m. 
f-y^y©|ijfli^i^ Rii:- 1 ^ ^-r-b yx-r-s?) i:*ij^-r ^ 

[0 0 14] *%H^£Dti$S5nii;i^ffiti, nyf-y>y^ffj 
ffll^ njf €. 5 ^ -tr y X ^#^1- § /c46cD ^ -fe yX^tS 
'lffSi:> Bt^fb^nfcnyf-y^yr-^fi:, nyf-y^y 

y^y^taiit^xx^yyi:. ^ijffll^nj^nsnyry^y 
^it^-r -5 /-c46©3 y ^yitt^'lf fS^^tJ7-r -b y X 
^fBli'rsXr'y:^^:^ nyry^y^fiJfflfl^WSii i: 
T- 1 5 ^ Y -fe y X *^ ^ -b y X IBS f E « ? n T 
l^SA^SA^;&W£t?.Xx-yyi;. fiJS^fSfc i D 
■tryxA^IBM$nTV>5 i: fijir^ nfc ii LT 
nyf y^ycoayxy^yx-^^SW^Xf-'yT'i:^ 

[0 0 15] *f§H^«7"n^^"^i:.ti. :3yf-y^y^fiJffl 
^nj-rs^'T-feyx^it^-rsfciixD'^-Y-byxiit^lf 

7^1 B'Sf s Xx <y , fijffl If ti5 3 yx y >y * 
#s-r5fc«)<on yxy^ylt^lf fs^^ty^-r-b yx^ 
f Bif-r 5 X X -y 7° i: , 3 y X y ^y ^ If Bj-r § 
T-t^.^-r-feyx^'i^-r-t y xfBlt^StcfBii^? nr v ^ 

5*^S*^^W^-r5Xx>yy^, W^#g{cj;07-r-tr 

yx^M^nri^?. t |ij»t$ nfc - ii^^fft lth 
yx y 0)3 y X y -y X- %a#-r § Xx >y ^ 3 
yt!a-^(c|ltf^-ti-5o 

[0 0 16] 7'D^"5i.fe§v^ti^(^)-a5*w^k$n 

[0 0 17] *fgHj^co7-r-feyx+)-wsti, ifRj^^n^ 
3yxy^y*1t^-r5fcJ6©3yxy>y!|f^1f^i:, If 

mmmm^mwit^ m^mmwm^^ts ^ ^ -t y x ^ 

IBti-rSv^-byxlB1i#Si:> 1fl8ma^B*^e.SfB 

^ tifc. ^-r-b y x^&issu-r 5 ^-r-b y xpsuif $5^^ 

tsy-f'kyT.mM^^mt^^m^mt. ^-f-byxs 
^^-b y xMf fgf- WiSl- § ■^-r ^:r y X 
^v-Y-byxHB1i¥©*^p.tttil-r§ttai#l5i:> tttil# 

i 0 ttw^nfc v-r-b yxt4s*iisim ^B^r^tot 

^M^lgi:^ ^-f-byx+J— /-^cD^MSi^fflv^T. 

immc^ <o i&^mmmmm^nfc^^^y7.izm 
/c^Y-byx^^^-b y xSif<^}gfa u /cff isjaggfi 
[0 0 18] *^B^o)'fif8j!aa73?i«. mmm^n^ 

uy7-y^y^m%t^Tc^<D-nyTyyi^%'^m.t. If 
WISB^iiSiJ-r5S*ilg|J'Bffi^#t?^Y-byx;& 
IB1t-r§Xx-y:/i:, t»IS5aiMgB*^63^««n/c, 7 

-{^yx^mmt^^^-tymmwrn^^tsy^-ty 
xmM^^mt^xT-j-fh. ^-r-byxs^tc^sn 



7 

Mt^xT-yyt. m^m&ic^iom^-^nrcy-f'ty 

[0 0 19] ^mmmmimm. mmm^-^m. m 
t«cyp^"^A-e{±, '7-(-iiy:^^i^nLr\^^^!it^ 

[0 0 2 0] *f|H^o^-r-byx-9--/^, Mt;{ctS$Bffl 
[00 2 1] 

2{ca. ^'V'l'TyM-l. 1-2 («T. cneco 
t/^Tti> ^^-fZy h;b"«2^0*^^$nTV>?,A^\ -T^ 

[0 0 2 2] s/c, -ry^-^->y h2tc{i. ^y-cjy 

3 . n y ^ 3 t 3 y r y ^fijffl f 

[0 0 2 3] !inib<Dziyf-yy-^~/^3. 7'i'-feyx 
[0 0 2 4] mzii-^y-fryb Kom^^^i^x^^^ 

[0 0 2 5] 02{C*5V''T> CPU (Central Processing 
Unit) 2 1 li. ROM (Read Only Memory) 2 2 tCfBIt^ 
nTV^5:/D^/"^A. ^fct±ieiig|52 SA^BRAM (Rando 
m Access Memory) 2 3 {CD- K^nfcyn^^AfCtiie 

oT^flcOSaa^^fTtSo :5'-Y-7 2 0a. ftB#i]{'F^ 
t7V\ Htgimf6%CPU2 ncili|gt?.o RAM2 3tC{i$ 
/c, CPU2 1 ;?)^#fflcDS!ia%||fT-r?>±fC:fel''T*^S* 

[0 0 2 6] 'A^mtm^^z 4 ii;. nyf-y^yx-^^ 
Bl^fbt -5 i: i: t , gt(cB0^{k ^ nr V ^ 5 3 y X y 

x-^f%a^-r§5aa^ff5o 3-r<y ^gi52 5 

ATRAC (Adaptive Transform Acoustic Coding) 
^y^7x-X3 2«:/M.TKv-r:''3 0tc^ig$nT 
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fty^y 4 4i;DM*tflLfc. xyn-K^nrv^Sf 

[0 0 2 7] 4 4«. m^iis ^*UXr 

^■y^ («^) 

[0 0 2 8] CPU2 1 . R0M2 2. RAM2 3. Ht^^b^fi^ 
g|52 4. r>y^§13 2 5i±. /^X3 l^/>bT 

-fy^yjL-xs 2 fegM^nrv^^o 
10 [0 0 2 9] Atil;':-ry^f7x-X3 2tc{i. 

F. V'>X'5:HJ:»)*5A:'jgP2 6. CRT. LCD*HJ:0 

^SxVXT'b'i'. Mt>"{cxif-A^ifJ;D^5m;':g|! 
2 7. M-FrVX^*i:ctO«fiic$n^lB1igP2 8. 

2 9*^gl^$nTV^§o ji{tg|52 9ti. -ry^f-^-'yh 
2^^tTcDlfa5aa^tf9c afB0P2 9{iffc. ffitO 
^' ^ -< 7 y h ©F^ T\ 7 P yfi^ $ fc tir ^ 

[0 0 3 0] At±i;':^y^7x-X3 2fcat/c:. 
20 fcjSi;TFv^73 0*<^^$n. Si^mrVX^4 K 
)trVX^4 2. 7^?SMr^'X^4 3. lKl/^^±^^^*:^ 

-ryxF-;i/2ni.o 

[0 0 3 1] H^ttm-rs*^ nyxy^y-y-- 

Lfc^'^-i'7yM tm^m^mm<Dm^^^t^^y 

x\t. mznm^^t. nyf-y^y+f-z^3. ■^-I'-tryx 

[003 2] i^t. 03<D7n-f-v-F«:#MLT. 

^•7^7y h 1 tf'^yy-yy^-'^'iti'^^yT'yyn 

[0 0 3 3] a— !f*\ A}']g|52 6^»ff-r5CJ;T'3 

yry-y+^-/^3^c^t57^•trx^^g^•r5il. cpu 

2 Hi. Xr-y 7°S UCfc'V^T. iiflg|3 2 9^$ijffllb. 
-^y^^-^-.-y F 2%/rUT3yf-yy9--/^3(i:7i'-tr 
X$-i^So XxyT'S 2li::feV''T. a-^f>b^ A:':g|52 

40 6^i*ftbT> m^.^^^f^^yy^yy^^^t^t. 

CPU 2 Hi. COjg^'ifg^gltS^O. ilfIgP2 9A^ 

e.. -ry^-^-y F2%^LT3y'ry>yHt-/^3tc. 
JiS^nfcnyf-y^y^iatSo H4 07n-f-+- 
F L T^JS-r J; 9 . ci (DMSn^^tt/c n y r 
y<ytf-/^3ii. Bf^fb^nfcny-ry^yr-^f^i^fe 
LT<50T% Xx>y:/S 3tC*3l^T. CPU2 1 ffi 
{Ig|32 9%/rbT. ccDnyry^yr-^^SfHt?. 
i:. Xx-y7S 41C431/^T. ^(DH|^{t$nTi^?.3y 
xy>y7^-^f*fBMg|52 B^^fiK-rs/N-FT^-x^tc 
50 «*&L. iai«^-a:5<. 
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[003 4] i^fC, 04©7a-f-\'-h*#BgLT, 

[0 0 3 5] Xf--y7'S 2 1 tcfc'V^T. ny-rV^y^t- 
/^3CDCPU2 Hi. -ry^f-^--y h2A^6aftgi32 9^ 

L. T^-bX^gltfc^^iJSbfctlt. 7.-r7:/S2 2 

[0 0 3 6] Xr-y7°S 2 3(c4oV^T. nyf-y^yy-- 
/^3CDCPU2 H±, sB1ig|52 StcfBli^nTV^i-nyr 
y>yr-^cD43*^?.. Xf-'y^S 2 2cDS!ig7-BJtiiAS 
nfc1f^i?ttS$n/cnyf-y>y^g!^^tti-ro CPU2 1 ■ 
Xf->y:/S 2 4{CfeV^T. fS1iSP2 8*^e)0t*tli$ 
n/cnyxy^r-^^. H§^fl:ffl^gP2 4{c#J&U 

[0 0 3 7] iaMg|32 8ti:|aii^nTV>5nyry>yr 
-^tt, 3-x-y^g|52 SfCckt). rocATRAC3:^Sfi: 

V > 5 n y f- y >y -r'- ^ A^Hl^ft: cTns d i: (c „ 
[0 0 3 8] fe-^5A/, fB1ig|52 8 {C^iiUg^fk 

[00 3 9] ;^T>y:/s 2 5tcfc'V>T. ny^y 
^y9--/^3tDCPU2 Hi. H|^fbL/cay-ry>yr-^ 30 

>&fE3M-r-5 7;i— V-y h^^i^-r§^>y^"tC. Bt^fkS 

5^#HSLTftJSt?iEKBtKEK.c (Kc) ) nyf > 
y^$mt^(D<,ol-m^j:y'{'ty7.^mit^rcib<Dy 
-I'-b^XID^f^tint^.o ^LT. X'T-yT'S 2 etcfet/^ 

n^f y'y9--/^3©CPU2 1 Xf->y7°S 2 4 
CDMSTHg^fbtfcnyf-y^yi:. T.f-y'/S 2 

mv^-t^y-^-tyxid^mubrc^y^'t^yt--^ 

y hitLtcf-'^'^. mm^ZQij-^^. -{y^-^yh 
Z^ftLX. 7^-t7.Lrtrc^'7-^7yV HCvkMt 40 

[0 0 4 0] 05t±, j:©J;9JctT> nyrv^yif- 
/^3*^p.^^v-r7>'h 1 (cayxy^yA^'iii$&$n5^^ 

c:07:t-v-y hti. ^y^^ (Header) i:f-:5f 
(Data) i:{c*D«|J^?nSo 

[0 0 4 1] 'N-y^'lCti. nyry-ylfi^ (Content In 
formation) . r>^'^;l/«ifiJ©ffl'i$S (DRM (Digital Ri 
ght Managenent) information ) . (Lie 
ansa ID) . -(^-^Vyif^-ZTuy^ (MMt^- 50 
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fuy^) (EKB (EnablingKey Block) ) ^i:Xf. EKE 

y^y^-KcilLTOr-^fKEMc (Kc) ;b^BBH$nTl^ 
5o :&*5. EKB{COV^T«. mi S^P^LX^mt 

[0 0 4 2] :nyf-yym^lCii. r'-'}i tLX7ir- 

v>y b{bsnTi/^§3y-ry>yr-:5f*i^sy-r?.fci6o 
iJSiMili:ft<03>'r>'>yiD (ciD) . ^<r>nyfy 
ycoa-TyXDlj^rjiEiDmnm^nxi.'^o 
[0 0 4 3] xi^^;HSfiJWiI1f|g{c«. ^jyy-yy^ 
^t^mWl^J^Xf^M (Usage rules/status) t. UR 
L (Uniform Resource Locator) A^~EB$flTl^2)o 

[0 0 4 4] uRLti. ^-r-feyxiDf-MS^n^^-Y-fe 

yx Wf 1" 5 i: 1 7 ^'■t Xf 5 7 F bXtf $gT'S D . 
0 1 co^>Xr AOii^. ^-T-byx^git 

[0 0 4 5] r-^'fi. ffiStDi(cDH|^fb7n-y^' (En 
cryption Block) J; OSiS^nSo #Pg^ft7n'y^ 
ii, -T-iz-v;!'^^ F-'l' (IV (Initial Vector) ) . 
-F (Seed) . ^oit/nyry^yx-^^^^-K" c-eBf 
^fbUfcr-^Ecc (data)fcJ:Dli^$nTi/>§„ 

[0 0 4 6] 4^-K'cti. i^^i^lciD^^nSic^tc, 
n y7^y>y^-Kci:. aiST«$n5{jlSeed^/N'y 

[0 0 4 7] K'c=Hash(Kc, Seed) 

[0 0 4 8] -r-v'-v;!/^^' F7HVi:>'-FSeed{4. ^ 

[0 0 4 9] dcDHg^fb^, nyry^y^Dr-^^S/^ 

/ w F ©Bt^fbti. ws© 8 / w F (o^^{\:(om^^n 

fflLTfTt>n5CBC (Cipher Block Chaining) ^— FT 

[0 0 5 0] CBC^-FOJi^. MlflcDBAi' F<D=!y 
f-y^yr-^*B|^<b-r5i:t. ^<0bu®©8/WF<0 

y>yx-^f;S:0g^ifr?.i:tt±> -I'nv'-v;!/^^ F;HV 

[0 0 5 1] HOCBCt-FtCj^SBg^fb^Ra il t 

[0 0 5 2] c^Bt^^btCOl/^Tti. 04 

[0 0 5 3] $fc. Bi^^^stcov^Tiieintse.* 
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coo 5 4] j.x±oj;3{cLT. ^^^7yhm. 3 

[0 0 5 5] §^^'Y7>'M«> 

Lrc::iyy-yymmt^t^. "y^-tyx^^imtx- 

i^^^'ZWSb^o ^CX\ 06^#MbT. ^"y^Jy 

[0 0 5 6] Xr-y^S 4 HCfc'l^T^ ^7-<7y M 10 
(DCPU2 1 \t. :r-^ff'X-hn>2 6%filf^-rs<:i:T'*g 

^Lfcnyry^ycDisgipilS (ClD) ^Mf-TSo CtD 

nri ^ -I. y f- y ^y etc M# s nr V ^ s H J; 

[0 0 5 7] ^UT. CPU 2 Hi, n >"ry>y*^|g^^ 

Bg^ft:?nTv^l.3yx>^yx-:S^£0'^>y^ic|dM^n 20 

[0 0 5 8] :^^ic, xx'y/s 4 2»i:)t*> CPU2 i 

\t. Xx>y:/S4 IT-M^^Pjnfcv^-tryXIDfCji^jS 

s 4 3tcji*t. CPU2 1 a. y^^yxmwMm^mi 

[0 0 5 9] Xr-y y^S 4 2}C*5l>T. 30 

CPU2 Hi.. mm-inx\^'^^^-tyxm%mm 

?nfc^^. CPU 2 1 ti. Xr-y7°S 4 5tjt*^. 40 

HI o®7D-^-\'-hmfitTm5E'r5o 

[0 0 6 0] Xr-yT'S 4 4tc*5V>T, ^-T-tryXfiS 
fcW?i)^PIrt 5 i:¥iJS$ nfcJi^, Sfca, Xr>y 
ys 4 5{<:*5V^T> v^-byX/!)'iMff$n/cJi^. Xr 
•y^S 4 6{Cl*i. CPU 2 1 Pg^fb^nTt/^^ny 

m-^^^c tbX. Xf--y:/S 4 7(C*3l>T. CPU2 1 
fi, RAM2 3{c|B1i^nrcB|#{b:/n'y^Ox-af«:s 
m 5 Or-^ tgBB^tiTV^5m^{t:/o -y ^¥fiiT\ 50 
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[0 0 6 1] :3y7-yy^-ic^m^y3ii(DmwM. 

mi 5^pmLX'^mt^t)\ x/WX/-K^- (DN 

K) (0 8) ^ffll^T. EKB (0 5) fC-ttn§^-K 
EKBc ^m^Ctif^X^. ^(D^-Kmc ^fflV^T, r- 
^Kf« (Kc) (0 5) rjy-r>"y+-Kc^t#§ 

[0 0 6 2] CPU2 Hi. $e,{C. Xr-yT'S 4 8fc*J 

v>T. ^M^im^^2 4ic^K)'m^nrc=iy7-yyT 

LT. n-T-y ^^§152 5 J; f3rn-F$n/cT-^ 
CPU2 Hi. Atil;^'l'>'^7x-X3 2;^^5,W^a5 

So 

[0 0 6 3] i^fC, 0 7cD7n-f-^-h%#B^LT. 
06©Xr'y7°S 4 3T'^7t)n5^'l'-t>'X3J^#5aa<^) 

mmic^i^xmmt^o 

[0 0 6 4] ^^-rryhui. ^^Mtc^-r-tryx+f- 

/^tcS^-T'Sil^fCi;!?. DNK(Device Node 

Key). ^ v-rry h 1 O^M® • {iimm(D^7. ^^-b 

h" X -r - ^ ^ f# b T *5 < o 

[0 0 6 5] u-7iD(i. ^^-rzyhtticsoDSTe. 
nrci!S'Jtf«i^SL. mm. ^ov-r-feyx^cm-r 

5EKB (W5^fb^-7n-y^) tc#sn§Hf^ft$nT 
3 yf y^y ^-Kci&^^l" 5 oiCiij.g^'T / w X y 

-K*-T'fe5 (Hi 2^#BgLTm^-r5) „ 

[0 0 6 6] affltCXr-y 7'S 6 1 fCfel^T. CPU 2 1 

it. i^^tmMlcimt^nxi-^^'y-^^yT.mcfiiZ-t^ 

URL*> 0 5tc^t^'y^>5a{#-r§o ±aibfcJ;9 
ic. CKOURLtt, -^{i»3'N>y^j'fc|B3*^nTV>S'7'i'-lr 
y X I D IS 1 5 ^ ^ -b y X ^ 3j|f 1 5 1 7 ^ -b X t 
'^t7FL/X-J?fe§o ^ilT% Xr>y:/S 6 2{cfcV^ 
T. CPU2 1 fi. X-f «y7S 6 1 T'^#bfcURLt7^-t 

aftwtcti. jaffg[3 2 9[cj;'p-ry^-^->y F 
2 ^/r UT^-Y-b yx-9--/u (c7 ^7-fex*^tf t>n?.o 
v-rb>'X+i--/Ui±. ^^-f'7yhHcW 
LT, PX-rs^-r-byx (nyT^y^y^Sr^ffltSOlc 
'i^S^^Y^yx) ^^gs■^§^'1'■byx^g^1f|g. M 

mcoL-^ldt^^XU- VcoKtS^^^LX < S (t^Kli 
t^m9C0Xf-yfS 1 0 2) o CFU2 Hi. JKDg^ 
^W:^g^2 7^Da^^gI!^cg.1^^■^i?,<, a-+f~(i. ucoa 
/T^fca-cJv^T. A;^§P2 e^^ifttT. ^'I'-byxjg^ 
'ifg. a— ^"ID. fo-ctyv^xy-F^A^b-rSo 
dOa— ^fID^;/^X7-Ftt^ ^^-TTyMOa-lf 
^y^-^.>y F 2^/n.T^^-byX't^— /MtC7 

^•bxb. mmcm.Wbxi5\,^rc^(Dxh^o 

[0 0 6 7] CPU2 Hi. Xx>y:/S6 3. S6 4tt3 

v^T. xti^2 6i)^ibxt}-snrc^-f-tyxmwi^m^ 
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CPU 2 1 a. 7.7-y-fS 6 Stcfel^T. EM^Z e^SO 

msif«^it;-9— exr-^ (m^ts) tc^^nsu 

[0 0 6 8] ^-r-feyxit- /Uti. ia9^#F,SbTft 

>y7°S 1 0 9) *\ S/cii, ^fWilfc$n*V^ii-^{c 10 
fi. ^Y-tryX^j^fiLTCl^l^ (XT-yfS 1 1 

2) o 

[0 0 6 9] 7.7-y-/S 6 6ti:*5V>T. CPU2 1 li, y 

-f -tr y e, V Y t nr § fc A^S 

[0 0 7 0] Xx-y:/S 6 6fc:fe^/^T^ ^-T-tyXA^j^i 

ft^nT*^V^i:fiJ^t/cii^. CPU2 Hi. Xf-'yT'. 
S 6 8{Cji^?ii. Xv-ffiil^^ff-r^o M^^WiCJi, CP 20 

[00 7 1] iH±(D^^lcb-C. ^i^y-CJyV Ut. 

3 y r y >y X- tc f^ia L T 1/ ^ -r -fe y X I Dtc WiS-r 

[0 0 7 2] mKD'y-^^yT.m^^im. #a 

10 0 7 3} ^"y^ryh nm^k-^n^'y-^-tyx so 

[0 0 7 4] fgffl^fftcfi. ^cD^-r-tryxtcS-^i/^ 
v-r-byxfcScfv-T, ayy-yy^^^yu-l^t^ 

ctmm^£^'yyti-mm. ^(Dy^^yT.icm-^ 

\,^r. ayr-yy^u\^-t^^ttf^ajm^ji\^^ 

CD-RtC|2i|-r?)ili:A^T't§1iflJ. PD (Portable Devic 40 

e) ica\d~t^ctti'^^mfs:mWL. ^-r-feyx^m^ 
m imnv^^mm. mu^^t^ 

[0 0 7 5] i^fC, E|9«7D-f--v-h^#BlL'r. 
07(D^9'f7yh lO^-f-tryXMiMc^^jSbT 

iifT^ ^-f-t y x-9--/^ 4 (D^-r-t yxsmatc 
7-r7yh ico^ifiicfi. ^•Y-feyxit-A4cD^i^iU 

CO 0 7 6] Xr>y:/S 1 0 1 tfeV^T. v-T-byX^t 50 
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~f^4<Dm2 Hi. ^v-TTyM J;t)7^-trX^S 

tt^$-ett«b. 7^-trX^Stt/ci:t. Xx'y^S 1 

ozicm^^. r^^T^Lx^fc^v^ryh iicidL 
X. a-ifiDi/iX7-K> Mmc, ^'f-tryxjg^ffi 

hlA^B. 0 7CDXx-y7°S 6 5(D$!lIff\ n.-1f'IDi: 
/^X7-K. U-7IDMt?ic^^-tryX|g^'|f|g (^-r 

-tyxiD) *^2im^nTtfcJ:t. v-r-byx-y-wM 

£DCPU2 Hi, )ijlg|52 9*/^tTCln^:SmU Bit) 

[0 0 7 7] ^LX. ^-r-byX-y— /^4(DCPU2 1 

X-r-y^S 1 0 3tcfcV^T> 3lffgl52 9A^?)S^-t^ 
5 tc7^-bX n.-- (f ID^/^XV- KtC^^tiSr 5 

a-4f'(D-%-{a5aa^s*-r§o is^-9--/^5ti, ^y^ 
-:?-'y h 2^/^LT5-r■tyx•9•-/U)b^p>4^I$a^I<o 

ii\ )§S»C7Y-feyx©*f«om</>©l|il*<fe§*^S 

yxiDi^#^|^§^§-^{iilS«^jMfiL. 
%if*^fe5^^t{i. v-r-byx^^cD^ltHJco-^fSif^ 

[0 0 7 8] X-r>y7S 1 0 4te:*5V^T. ■5-Y-tryX+^- 
-/UC0CPU2 Hi. ^^5 7b>e.tD-%-fi;gm*^ 

^-r-byx^f>f^-r5 <! t*IF^t5^<is^mT'fe§*> 

{Cii, Xr-yT'S 1 OStcl*^, X-r-y 7°S 1 0 2©j!a 

ar-sj ^) iistifc v^-feyxitsif $g{<:m-r 5 ^-r -ir 

yx^. !B1igP2 8tfHii$nTv^;s^-Y-iryxcDft'A^ 
ss^Dttifo iaisgP2 8icHE'ti?nTi^;5^^-byx 
li. fe?>*^i;j6'7-f'-tryxiD. /^-v^3y> fMBflf, 
t^!i«Bi®^olfa?A^IBM^nrv>Sc Xx<yys 1 0 6 
(cfev^T, CPU2 Hi. ^-cD^-r-tryxtcSfiLfcU- 
yiJi^mat^o $e.ti:> XryfS 1 0 7{c*5i^Ts 
CPU2 1 XT^-yT'S 1 0 5T'S^$nfc7-r-tyX 

fc. Xx'y^S 1 0 2(DmmX\ a— tf^efgffl^fW 

i6ffl«?nTv^5jiffl^ff»c#)!in?n5o cpu2 la. 

nfc^Sffl^ff ^ ^ -b y X fcf#nt 5 o 

[0 0 7 9] Xr^y^S 1 0 8tCfcl^T^ CPU 2 Hi 

cintcit). 08fc^^n5<fe^5:iifiK<D^'i'-byxA^ 

[0 0 8 0] :kic. XT-y7°s 1 0 9icji^, ^^-ty 

X-9--/^4©CPU2 Ht. ^cD^-Y-tyX (08{C^$ 
^> jiiIgP2 9*^P.^y^f-*'y h 
2^/rtT^^-r7yM (cji{8$-ti:?.o 
[0 0 8 1] xv-y/s 1 1 ot:fev>T^-i'-byx-9— 

/U<DCPU2 Ui. Xx>y:/S 1 0 9©^aT\ V^SSI 
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T'y:^S 1 1 UC^oV^T^ CPU 2 His SR^^ia^llfif 

•rso m^mcii. cpuz n*. afssps 9:6^5) s^-y- 

7 -tr y x^Stt § ii ^ A^T- 1 u h tc ^ 5o 
[0 0 8 2] ttsh%. Z.(Dt^^K[ts iS^-9--^^5A^ 

5. 7 -b y xcD#4^^i^ i: -r § ^m^^timntn 

X<^<DX\ X-r-yT'S 1 0 4*^P.X'ryys 1 1 2^ 

1^9^. CPU2 X'7-ffia^^fTt?.o Mf^WfC 

{i. ^'f'-tyX-y— /W(DCPU2 Hi, afig|32 9^$lj 
ilLTT^-tXLT^fc^^^'fTyhUCWLT, ^-T 

ffla^iiT^-a-^o 20 
[0 0 8 3] ci^Ji^, ±aib/cj:9tc. ^cD^^-rr 
>M ti'^'i'-iryx^Sitsc^^^-et^v^o-e. 

[0 0 8 4] 01 0«> 06(OXx-y:/S 4 5{Cfett§ 

7-r-t:yxMi)TSaa£Oi¥ffl^SbTv>?)o 01 ocDXr 

-y^S 1 3 17^MXT->y:^S 1 3 5<DMi. 07COX 
r<yyS6 17^SX'r-y:/S6 5CDft!iai;»*e^»cP^ 
(OfflaT'^^o /cfcbs Xx-y7°S 1 3 SlCfcV^T, CP 
U2 Iti, SfAt^5Y-tyXl:-ti:^<. Mfrt^^^ 30 
•byXCO^Y-feyXID^ffiOjit?,. ^LTx Xr77'S 
1 3 5{C:feV>T, CPU2 Hi, a-1fIDi:/^X7- Ft 
tfeic, MfrtS^^-t^XtD^-r-byXID^, ^'T't 
yx-9--/^4(c3^fg-r§„ 

[0 0 8 5] Xx>y7S 1 3 5<DMM5aafi:mtT, • 

5^bT< (0 1 1 OXx'y:^S 1 5 3) c ^C-Tn ^ 
■^-fTyh 1©CPU2 1 fi, Xr'y7°S 1 3 etcfc'i/^ 
T, vf'-tyX+l--/M*^S<0^ffl#l^2t^Ojf5^^S« 

::n^til;'3g!5 2 7{CtJB;^]b. ^/T^^^So n.— if' 40 

L/cOf^o Xr-y^S 1 3 7t?CPU2 Itt. J;^±Oj; 
ft) ^iiA-r-&/ci6«*bjA*^7-f'-byxif-/U{c 

(Ell l(DXx>y7°S 1 5 4) o iCX. Xr-yT'S 1 

3 8{cfev^r. ^v-r7yM<ocpu2 Hi, ^-f-ty 

X-9--^MA^e.©<lffll^ff*B?t#L. TsT-yZf^ 1 3 9 50 
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TV^S^^fE-r^^^-tryxofgffl^ff i: LTMfftSo 

[0 0 8 6] HI 1 Hi, i:^±o<;7 5^'7y h i o^^r-b 

yXMgr^iatcWfSLT, ^-r-byx-9--/^ 4 *^||tf f 

57^-feyxMiT5aa^stT(/^^. 

[0 0 8 7] Xr>yys 1 5 1 (cfeV^T, y4 

■t:yX-9-->'M(DCPU2 Hi. ^■^'I'Tyh 1 *^&(D7 

^■bx^gitsi;, 7.Ty:fs i 5 2t*3v^T, ^'^-r 

7yh lA^Xx-yT'S 1 3 5 "r-jMflbfc'^^-byXjg^ 
tfS^v^^ryxMgirg^'ttfBi: i: fetgiit^o 
[0 0 8 8] Xx-y/S 1 5 3tCi3V^T, CPU2 Hi, 

*fj£-rSffiffl^ft (MM-rS^ffl^ff) IB1ig|3 2 8 
*^P>S!*'ffit, ^^^-TT^F HcjMm-rso 

[0 0 8 9] ilcDilTj^CWbT, ±)ztiLfci;5{C, 
^7yM A^?)Mffl*ff©WAA"!01 0©Xr-yys 1 
3 7CD$!ia-e*UiiSn^i:, Xr-yT'S 1 5 4(cfcV^ 

T, •7-r-byx'it-/^ 4 (DCPU2 Hi, *Liisnrc^^ 

{i, ±at/cJ;5{c, Xx'y:/'S l 3 QfOSaaT'Sfflb 

[0 0 9 0] *ISB^fC*3t/^Tii, 0 1 2tC^^n5J:'5 
{C, T'n-F^^-VXh'fy^'UT'v'ay (Broadcast En 

cryption) 77i*^C)MatcS-:3\>T, r^WXi! ^'f -ty 

n, gTIS©U-7 (leaf) ■hm^<Dy'/UX<D^-ltC 

mtSo HI 2<D^iJ©«^, #^OA^e.#^l 

<D 1 efEtorVUxs/cti^-f ■hyxtcm-rs^^-*'* 
[0 0 9 1] 0ffA9iT'^*ns'y';-«jfi 

-FtmLT4^-K0, Kl*^ 3@gO/-FtcM 

iSbTi|F-KO OT^MK 1 \ ti\ S4lS@oy-FtcW 

jSUT^-K 0 0 07is^-K 1 1 lA^, ^n^'n^js 
^nrv^^o ^bT, «"Fiscoy-Fi;LTcou-7 

(x/WXy-F) fC, ^-KGOOGT^SKl 1 1 1 

[0 0 9 2] pgS-tijSii^nTV^^Sfcfe, fJ;^tf, ^- 
K 0 0 1 0 0 1 1 O±fiL<0+-a, K 0 0 1 

$n, 0 0 0 t^-K 0 0 1 cD±f4©^^-{i, K 

0 oi:$nTi/^?>o J.:iTi5l1iti:. +-K0 0i;^-K0 

lQ±{icD^-ti, KOttn. 4^-K0i:*-KHD 

[0 0 9 3] =iyTyymmt^^-its mrm(DT 

;Uxy-F (U-7) g±S'D;l'-Fy-FS 

TO 1 oo/^xo^y- Ftjtjs-rs+-T'Wa$n 
5c s^3(3Dy-F (U-7ID) (cm-rs^ 
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KOOl 1, KOOl, KOO, KO. O^-^tf/^XO 
Co 0 9 4] *%W«DS/;^-rAfc43V>T{i, 0 1 3{i:^ 

mit>ri^r, m \ a coo^yT-ii, 8 + 24 + 32 

[0 0 9 5] -r^ti-^. clcDTv'XrAWy-KJ:'?? 

§o ?6(Cs «€>T(|iJ«D3 2mcOPgStCj;'3^ 2'' (*^J 20 
4 (Da— If (feSVHi^^-l'TyM) ^M^f 

5ii:*^-c*5o «TiatD3 2acoy-Ffc^tjS-r^^ 

-t\ DNK (Device Node Key) ^m^L. «TIS©U- 
7 W/S t I D 'J - 7 1 D il $ n -g. o 
[0 0 9 6] #'r/^'l'X^^-<-fe>'X<D:^^-tt. 6 4 

(= 8 + 24 + 32) gO^y-FT-«fi)c$n§>'^7.C0 

rtco 1 ofcji^js^n^o 'S^mi. ay7-yym^mt\s 

n/i:/-^X^«S)tt§/-Fti:J^)^^t§4^-*ffli/^THg^ 
(04^-^fflt/>TB|^{l:$n, EKB (|gi5^#I§LT 

tiKg-rs) F«3{cias$nSo «t©odnk{4, ekb 
cD^^-r7:/F nc4;ip)n5o ^5i'7yFu±, 5 

r-^i:i:t(cBHflJ$n?.E KB (HIS) rttcfSiS^ 

Tc^-^m^x. E KBrttciaai^nTi/^^ssti:^© 

X\ ^"y^JyV \ lt. ^(Dy-f-tyX(D/^7.lcmt^ 40 
[0 0 9 7] 0 1 4 KmMyV-m^<Oi]y-dV(Oj^m 

(DmitffiWi^^^to mi 4tc^3i/^T. mm-yv-m^ 

C0«±gti:«. ;l/-F4^-KR2 3 0 1 *^SS$n. 

©•fwcti:y-F^-2 3 0 ztimmsn. «TIStc 

ti. U-7+-2 3 0 3*^^^«n5o ^r/^-fXttlB 
[0 0 9 8] g±S*^e.mM|Si m 1 3CD^JT'«. M 
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f-rfu^orV^^x^^y-Fii^ns. UMisciioto 
y-F^]ij^iiLTM+ imToy-F> ';-7«> 

^©:*f dfUtc^SnSx/WXtcM'TSy-Ffc.tt; 

U-7i:$n«o 

[0 0 9 9] f^lJ^t^Ell 4£D|§MlS@0 1'Oa)y-F2 
3 0 5tCii;^f-d'U [y^UXx^-y^ (St^) ] t'^m 

^^n^ <i©y-Fi-;^Tfi:)iiS:5y-F. u-7tiy* 

UXT'y^^^ffifflLfc^i^^rVUX%^ty*rri'U 
Wffl<Dy-FSfciiU-7i:LT^^$n?.„ 1"^^) 
■fe. y-F2 3 0 5JJ(T*\ ytUXx^'>y^(D*xrr 
U{c^«$n5r/UX(DMay-F\ 43j:t;iJ-7tD 

[0 10 0] $&}c, MisA^6i(ia5^-Tfu'oia*-9-7'A 

Tdr>jy-F2 30 6i;bT^£-r^c:i:*^T-t5o 0 
14coMl?«. -^T-dV [y^'JXr^"y^7] y-F2 
3 0 5(D2lST<Dy-Fti:. ytUX-r^>yd7;g:^^fflL 
rc7'/UX<D-fj'rdV y - F i: 

LT. <D/- F 2 3 0 6 tm^^nXl^ 

§o ^7'ij7-dv y~¥X'h^n^mm^(oy 

- F 2 3 0 eWflc^ S4#fflt|tD*xrfU lc-&$n5 

WMn±mmHtnm<Dy- f 2 3 o ? *«^n, $ 
tni) [PHs] y-F2 3 0 8i:. [^^«HS] y- 

F2 3 0 9*<S^:jnTV>5, 

[0 10 1] ?5{c. *f-d"U. •9-7':^rn'J«. rV^ 

>y:^p/w^. ^jg*iMiiA^agtcBa-r5y-F> -r 

m^) xm^t^^ tt^^^mx&^o m^a 1 o<d* 
rrf u y- F*'y-A«giy-*-(Dig^-r§'>--Aii 

gixYz#ffl«iB^y-Fi:tT^stntf, y-;?7- 
ois^-r sy-A«it§x Y z (c. ^cDjijsy- fj-xto 

vHi^a^^-cosHff. ^cDis^^y-F^^- 
it^-ytiy^ (EKB) ^^^Lxmmu 

Fi-XT'Ox>'WXfcJvfLT«D*t|iJ«Rl^^x-i5f;6^BBtt 

[0102] CKDi^t, lOOy-F^M^^iltT, 

OT«y-F^^©]I;Sy-FtcS«Snfc::<7r3U, 
g V ^ 7" * f- U CD M a y - F ii L T ^ -r ^ «fi!t 

©(Di-oom^y-F^Watsy-;^-. nyr^^y 
ya/U ^mt'^^n/ - F^IH^^ i: "T 5 W'^fb4^-7n 
-y^ (EKB) J&Matci^^tT. Mi^y-FJ-XTtcB 

t^9/uxicmmt?>mm^mtrj:t)^ ii^y-F 

lcJS*5:V^ffi(D*xdru <Dy- FtcJSfSx^^-rxtcti 
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-So 

[0 10 3] m^ii. mi 2 icTjk-sn^yv -mulcts 

v>T> lo<D^^;l/-y(c#$n5 4-D(^)'r/^'i'7,0, 

1, 2, 3a/-F^-i:LT«3l©4^-KOO, K 

ctic^io. nm(Duyfyy^-%'f/U7.o, i,. 

-r'7.0. 1. 2, 3<D^)i*^«a<r)3yxy^y+-<D^^ 

;^)^BltlT-fe5o $/c. ff/c^n^f-y^^^-K c o 
y-K4^-K0 OTHg^{tU/cfflE n c (KOO. Kc 
on) h7-^^^LTfe?.V^tifa^j«f*(ct& 
«ftbTr/WXO. 1. 2. dicm^tna. rVWX 
0, 1.2, 30^*\ •^-n^'nOr/^'l'Xtctel^^Tffi 
Wr^^^W/-F+-KOO^ffil^TBg^En c (KO 
0, Kcon) ^<iSV>T3yxy'y:^r-Kcon*#S 
Ctt)'^p!mtr^^o Enc (Ka. Kb) tiKb 

[0 10 4] Sfc. $.§B#^a tCfcl^T. ■r/'?^X3<0 
FM-fiiilK 001 1,K001,K00,K0 jW^kV 

fc€#^ ^>X-rA (rVUXO. 1, 2. 3 

•YX3«rv'XrAA^6^D^i■r'i^SA'^$.?.<, "tcofcmc 
it. y-F4^-K0 0 1 .KOO.KO.KR^. iti^etl' 
fffc^^K (t) 001, K (t) OO.K (t) O.K 

(t) RtcHfrb. rVUXO, 1, 2(c^cOMff4^- 
^fE;il.'2^SA^"fel>. Ll.-X:\ K (t) aaati, 30 
a a a(DmX (Generation) t ©Mfr^-T-fe-S C i:^ 

[0 10 5] SiT+-OE»IOV^TlKB^tSc 
cDMffti^ 0'J;^{i\ HI 5 Atc^tW^fk^-yn-y ^ 
(EKB : Enabling Key Block) t^litl?)'fuy i^y^ 

UT. fe^i/^ti!a^^l*te:fettUTx>WXO, 1, 2 

fuv^ (EKB) 01 2t^^ns<fc9*^yu~ 

i^jg%«)3!tt5^U-7 («TIScoy-F) (cmt^ 40 

^ft*-{CJ:oTm*n5o ^mt^-ftiy^ (E 
KB) a. 4^-Mif:/o-y-^ (KRB :Key Renewal Bl 

ock) tmin^ct^$)^o 

10 I 0 61 mi 5 AiCTTst^^it^-yuyif (EK 
B) a. y-F+-©M«fO*g.S*'r/'?-Y7.cDi?^*<Mfr 

§o 01 5A(D^J{±, Ell 2tC^-r"y'J-|ija4itDrV^ 
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So 01 25b'>5W&*^:S:i-5tt^ r/WXO, x/^^X 
Hi. Mffy-F4^-a:LTK (t) 0 0, K (t) 
0. K (t) RA'ii^^S-CfeD, T'/UXZlt. M^y- 
K^^^-fcLTK (t) OOK K (t) 0 0. K (t) 

0. K (t) Rti'^'Z-^mTh^o 

[0 1 0 7] 0 1 5 ACDE K BfC^$n?)=};5(C, EK 

Biam^m^mt^-ti^^^n^o mi 5A(o«t© 

(DBi^fb4^-fi. Enc (KOOlO, K (t) 00 

1) TSSo nrniT^uxzcDW-ov-y^-Koo 
1 oicj;-:5TBi^ft:$nfcMffy-F+-K (t) oo 

lT'fcO> T/WX2{i. g#<0^O';-7^-K0 0 

1 OtcJ;oTCOBi^fb4^-;&m^L. Mffy-F^- 
K (t) 0 0 1 %l#5ili:7b^-et5o Sfc. 
l#/cMffy-F4^-K (t) OOl^fflV^T. 01 5 A 
«T*^6 2gB«B|^fk^-E n c (K (t) 0 0 1, 
K (t) 0 0) tim^^mtr^^s Miry-F^-K 

(t) oo^m^^tti^x^t^o 

[0 10 8] &rfm^. m i s k<o±t)^^ 2^a<DBt^ 

fb+-Enc (K (t) 0 0, K (t) 0) ^m^t^ 

!itr\ Miry-F^-K (t) oifm^n. iin^ffl 

V^T^ 01 5 A<0±A>?> l©a©Bg^fb4^-En c (K 

(t) 0. K (t) R) ^mmr%ctX\ Mfr;l/-F 

+-K (t) RA^ffsnSo 

[0 10 9]-^. y-F^-KOOOtiMfftSW^ 

{c-&*nT*5p.'f> y-Ko, 1*^. Mify-F^-i: 

LT'i^S^cD^i. K (t) 0 0, K (t) 0, K (t) 
R-e$)5o y-FO, rV^-fX^^-KOOOO, 
K 0 0 0 1 ^fflV^T, 0 1 5 A©±*^P) SSeOBf^fb 
+-Enc (KOOO, K (t) 00) ^m^t^^t 

f-Miry-F^-K (t) Qo^m^u UTim!K. m 

1 5A«±A^P)2©@'DB0^ib4^-En c (K (t) 0 

0. K (t) 0) ^mm?>!itr\ mmy~v=>r-K 

(t) O^m. 01 5 AO±*>6 llSScDBf^fb4^-E 
nc (K (t) 0, K (t) R) ^m^t^CtX\ M 
Wl-V^-K (t) R^m^o C(OXoKLX. x/^ 
^XO, 1, ZimWiLtc^-K (t) R^m^Ctti^ 

[0 110] rji^. mi 5 k(D^y'fy^7.\t. mn^ 

[0 1 1 1] 01 2ic^s-r>y'j-ii3g«±iitSc>y-F 

^-Y. (t) O.K (t) RWMffA^^ST'feO, y- 

F^-K 0 o^D*^^DMiT5a^iA^'i^^S■r■$>?>ii•a•^i:«. 0 

1 5 BcDW?ilfb4^-^n-y^7 (EKB) ^fflv^?)ili; 
T\ Miry-F^-K (t) OO^x/UXO, 1, 2 

[ 0 1 1 2 ] 0 1 5 B E K B ti. m^iMM<D^ 

/\^-fi,cis\,^xt^^t^mcrji=iy7-y^y^~^m^t 

^^^cmm'^mxh^o mm\tLx. 01 2(i:^^i 

T-^-ri^;l'-7rt<?)r^^i'xo, 1. 2, 3*^^SI2^ 
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(t) c o ntS^'Z-mV^Ztt^. !l(Dt^. r'UT. 
0. 1. 2, 3®«)lcO/-F4^-K0 0^MfrUfcK 
(t) 0 0^fflV>Tfffc:&itji(OMST3^^xy^y4^-K 
(t) c o n^Bl^fbt/ir-^E n c (K (t) 0 
0, K (t) c o n) 01 5 BtC^^n?) E K B 
tfetcgafl:$n§c CcDgElWiCj;0, tV^^7.4:&H. 

[0 1 1 3] -r^tJ-^s x>W7.0. 1, 2(iEKB^ 10 

jaauTfffc^-K (t) oo^ffli^Tiit^3S:«r«€-r 
[0 1 1 4] 01 6(c. tBfjiS-r-onyf-y-y^-K 

(t) con^m^mmtLX. K (t) 0 0*fflV> 

T»ffc:ft«ffi03Vxy^y4^-K (t) conm^mt 
L/tx-tJ^Enc (K (t) 0 0, K (t) con) 

E 1 5 B E K B J:^fe^<fi^*:;g::0-tT§Mt 
/crVUXOOSaa^S^I-o ■r^t)*.c:ofJ(i. EKB 
fc J: § Hg^i k -y -Ir- r - ^ ^ 3 y-r :y 'y K 20 

(t) c o ni:Lrcl?iJ-?-*?.o 

[0 1 1 5] 01 QK^ti^oK. x/W7.0(i. 

iif*(c<§lft$nTv^5iemB#^<^E K B g^^^^afe 
&A^i;i6t&lftLTt/^i)/-F+-K0 0 0*fflV>T. J: 

Tt^Lrztnm.<r)EY.Bvmin^<o. /-k^t-k (t) 

/-F4^-K (t) oo^ffli/^r. ws\^y7-yy^- 
K (t) con^a^bT. mc^n^^m^rctbiz 

-rso 30 

[0 1 1 6] lai lic^mt^-friy':; (EKB) CO 
7>j— ■7«y FP^^fo /^->^3 y 6 0 1 ^mt^ 

-ywy^ (EKB) oA->>"3y^/T^-riisij?-e$. 

§o /^-v/'ayti. affiOEKB^IigiJ-r^MI 

^mt^-T^y^ (EKB) (?DEflJ5tox>^'rx 
0 3ti^ W?ij{b4^-:/0'y^ (ekb) 43©r-^gP6 

0 6©feB«:^-r^^y^TfeO. ^^^3p-ry^6 0 4 

« ^"gP 6 0 7 >t°l' 6 0 5 tt^S 6 0 40 

[0 117] 0 60.. m^immt^y~h' 

[0 118] ^^^g|56 0 7W> x-^glJeoetclSft^^ 

[0 1 1 9] 01 8-et±. r-^filLT^tt^l 5 A-e 50 
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W^X.rtmiWL^-fuv'; (EKB) ^3^#f §^J* 

^LTl^^o 'CDBfcDx-^rSi, 0 1 8 B W^fC^f J: 
9tc;&§„ ii(Di:t©Bg^^b*-tc#sn5F-y7y- 
F<?)7FIxX^F«y7'y-F7Fl^Xi:-r5o uO^iJcD 

l-^ti, ;b-F^-coMiT^-K (t) R;^)^#fnri/^ 
§cDT\ h'y7'/-F7FUXtiKRi;;&§o 
^Jx.a"a±IScDf^'-3JEn c (K (t) 0, K (t) 

R) tt. HI 8 A(c^-rpi«^yu-{c/Ts-rf4BP0ic^ 

f£;t?>u '^<0lSO7--^a. Enc (K (t) 0 0, K 

(t) 0) 'y')~±.x\m<Dr-^<^ui-<^'^ 

(L) la 

(R) i;LT^S$n§o Hl8BtD«±m<^r 
-^Enc (K (t) 0, K (t) R) \zn^t^\\Lm. 
P0cDfeT©f4lP00{C{ir-^f A^fe?,(DT% L ^^'■= 
0. ;&JCt±x-^!?)^*V^cDT\ R^f^^= 1 il^^o J-X 

■r'^T«T-^^c^^*^^^^n^ 01 sctc^-r 

[0 1 2 0] ^^{±^ ^r/S-rSx-^E n c (Kxx 
X, Kyyy) *\ >yy-«jgcOif IllCfiMbTV^SCD 

*^^/1^-rfc46tc35^$n§fc©T-$)?.o x-^g|56 0 6 
tiH§iW$n§*-r-^?E n c (Kxxx, Kyyy) 

0 : E n c (K (t) 0, K (t) R) 
00 : Enc (K (t) 00, K (t) 0) 
000:Enc (K ((t) 00 0, K (t) 0 0) 

i:^DJ;^*'l'>'r^y^'X;S:fflv^/c^iBgi;■r5i:. JWA 

[0 1 2 1] 01 7{C]^oT^ EKB7*-v>y Ftco 

\^X-Zh\zmmt^. (signature) 6 0 8{i:. W 
mt^-f^y^ (EKB) ^f§fTLfc0IJ^(ima-fe 

(^-r-tyx-y— /u) . n^T^y^yD/w^^ (n 

yry>y^t-/^3) . mmm (H^^t-AS) 

tT-r?>«?^^iT$)?.. E K B^StStrcr/Wxa. 
S^Wi:cfc:3TiEaiS:t5fiifb+-:/o-yi' (EKB) 

^nmm'iLrcmmt^-fnv^ (ekb) t-ss 

[0 12 2] Ji(±(0j:9tcbT. ^-f'-tryx-9--A4*^ 
e)«*&^nfc:v'('-tyxK»-^v>T^ nyTV-y+J— 

3 *^€.msnrc3 y^y?:fijffl-r5«ia^$ i:J65 
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[0 12 3] t^J:t>-6. nyf y7-9--/^3*^e.-i'^'l' 

^fb^nrfcO (Enc (Kc, Content) ) . ayv-y^^ 

m5icmf^^~Kmc iC)i^t:S>)VV§m\:t£n (Enc 

(KR, Kc) ) . EKBi:i:fetc. Bl^fbSn/cnyxy^y 

iciiimiir^y-^ryh lic^^siEn^o lo 
[0 12 4] 01 9(DmKm^mizit. Pi^tf, m 

2 OlC^$n?.J;9fC> DNKT-Bf^fl:L.fc;l/-h+-KR 
A'!#tnTV^§ (Enc (DNK, KR) ) = fi^oT. ^'^-fT 

b:^^-KR^ffl'/^r. Enc (KR, Kc) *>F> a yr V^V^-K 
c^a^-r^CiiTi^-ets nyr-y^y^-Kc^ffli/^T, E 
nc (Kc, Content) A>F)3yT-y^y=&^#f 5(1 i:*<T' 

[0 12 5] C(DJ;:oK. ^y-^ryh HCDM^mm 20 

{cfijD^T^iiiitcj;!?, 01 2i:iai 5^mmLxm 

(revoke) A^nJfgtC^So 

[0 12 6] ^/c, y^-izy^v-yid^maLxm^ 
-^i:^^-tyX(Dmf^tt*nTbn§i:i: testis ^ 

[0 12 7] tfc. ^'7-(7yYm(Dimmt%mm^ 
[0 12 8] mnmtimm<DmmK'o\^xM.. 028 

[0 12 9] *fi|H^tCfcl/>Tl±, 0 1 3m5!ibTiiW 
L/ii:9{c. ;^rd'Uy-Fic^'i'-tryXWl'r5T 

i/7,7-L.t. ^motiyTyy^^mt^T/U7.(Dij 

X a 'J j^j^'WlS-iSlt ?. n?. <DT\ 1fii!{CDDNK^lW|-cDrV ^ 
'{T.liCWrc-^^Ctij'^X't^o ^tOlSS. g;5;5;^f-3 
UcDny-fyy^r 1 -D<Df/^4XX'SMt^Cti3'^^^ 

[0 13 0] 0 2 H±, il(DK^^«LTl/>5o f^t) 
■5, r/WXDnc{3:, li/TsThKm-^^^^X. DNKl 

yxA^lHi^^nSc nmz. corVuxD net*. 

DNK2*^«iJt> arsn/i, ;<*UXri'-yi7f-CD 
U 'y tf y^^'L/cny-ry^y Z^BH^-rSC iiA-ST't 
i:cr)Ji^, xVUXD Hi. nyf-y^y 1 iiny'T 
y>y2iH/^9. g^?>yx'rA (T-yxxAtrVUx 
^ii-yxri.) fcj; DBefH^nrcnyry^y^Pf^tm 
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XtC l{@£DDNK/clt^)ht)S$-B:5J:^ti:Lfc«-&. CKD 
i^ors.ct\txtr^\^\ 

[013 1] Sfc, 01 3{ct5lJ5. m^\.f. TW«3 

2|5tjicO:S-HftJgcD 1 O 1 OtC, 02 2tC^$n5^'l' 
•tryX:^r:3'U 1 hy-(^y7.t}Td^) 2^fiJ?)ST§ 

LT, 3y•ry^y©^^■\'>'-'^^ fi5?iS> Ms 

^-^7.m<D>htrs.^i^K>\c^mLx. mmt^ctt'' 

[0 13 2] 02 2^0Wc:feV^T{i. #tJ^tf, v-T-fey 

xArd'j Hi. y>XcDy>y;i/tcSL. ^-f-feyx 
;df-ri'U2a. n>y^'C)i/>y;HcS1"§o ■^-T-byT. 
tsy-d^) ncti. ^-r-tryxiD*n-e355nyTy^y 1 

•tf'stcgBfljsnTv^^o ^^-feyx:^?"!!"!; 2«. 
•byxiD20r3y-ry^y 3. uyT^y^s 43j;y'ay 
xy^y5*^^$n. ^n^na— tf i iia— if sfc^i^ 

[0 13 3] C(D^o\z. ifmn\z^^^X\ts ijy-d^) 

[0 13 4] $fc. mm. «§§^^rV7{c7i46ai6 

]hts<DX\tr^<. ^'i'-try7.-9--/MfcJ;D. SiSfflS 
^RdKtc. ^m^^rV7ti:^'~t7yo-F-rS<fc9 
Kt^^tX\ a-lf{ci;;S*-<DliXA^nr^l*v^X'r 

[0 13 5] nyxy>yt±. ^mMM^nm ifo 
<?y^a\ M^?>=i>'ry>ySBfl1J--li~X. fe^VHi 

Mffl^iwrn?- F^-rytfei^Tfe^ iRi-onyxy 
^y*m5iii:3b^M*H/\ *%Wfcfev^Tti. ^(Dtz 
ib. ±Mbfcj;^{c. =&a-if (^v^TyF 1) ic. 

muMtLX(Dy^^yx^-/'^4t^p,m^mt. ^-n 

tC)t^)S-r5d:^MSI<^fEB^« (certificates) *Wfl:$n 

5o ^a-+f'i3:. ^(D^MH^ffli/^T. (slgnatur 

e) %fML. 3yxy^yfcf#nLT. nyf-y^yoK 

IE^(integrity)^fMliEU. *^onyry>ycD^ai»± 
5:0§Jlfi)5)'«T'*5o 
[0 13 6] ::(JD^^OSaiIOl?IJ{COV->T. 02 3CD7 
P-^^^-hm^ltTliiB^-rSo 02 3C»M±. 3. 
— »f*W6^4Lfi:x-af^lB1ta52 8 fcfaii*-ti:5 

u tfy^"®a^U4aj^t§fc'o-r-fe5» 

[0 13 7] Xr-y^S 1 7 1 fCfc'V^T, 

-fryb l'DCPU2 Hi^ mM^2 9^iYLX\t}-StX 
^Zmn^f—S'^tmrf-'^ tLXm'O ^tfo Xr -y 
fS 1 7 2tc43V^T. CPU2 1 Xr'y"/S 1 7 1 £D 

saa-cm i? nfcEtir- ^ to ^ - v- ^ 

fi. Str-y h<3[)3t!-Saifil (CGI) i:. 1 e>y F© 
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VViJ (Trigger) iltcJ: t^^^^n^ ayf-yycOy' 

-^?Oct3iCffli6jA$nTV^^c CPU2 la. ^t~^~ 
v-^Tb^l^tH^n/cJi^tcti, Xr-yys 1 7 3tcji 

[0 13 8] :^^{C, Xf'VyS 1 7 4{i:43l^T, CPU2 

[0 13 9] i^tC. Xf-'y7°S 1 7 5(Cj1^^^. CPU2 1 
It. Xr-yT'S 1 7 4C0SaaT-fML/c^-y^(Dr-^ 

{tfiScf-So /u*>6K# 

LfcfccDT-Si. (H7CDXr-y7'S 6 7) . 
[0 14 0] Xx-yT'S 1 7 e-e. CPU2 1 Bi^{k 

9) o 

[0 14 1] Xr>y:/S l 7 7lCfeV>T. CPU2 

(i\ =r:rVX^'#(cJ;i9li;i)c$n§7^aMrVXi7 4 
3{c|aiS^-a:5o 

[0 14 2] fB®?gf*A^5r:xVXi7T-fe5« 
Xf-'y7"S 1 7 6(cfc(/^T. CPU 2 1 ayy-y 
>y^3-r-y ^^§152 5 {cfliiat. <^J;l}i\ ATRACST^S^ 
tcJ;t)3yry'y^!^^{k*-&5o "thX. ^mt^n 

So 

[0 1 4 3] EI2 4fi. &.±(Di:oKLX, tmUWlc 

^fcsnrv^snyf ;^^y (e (At3) ) *^e.aai$n 
fc'i7;i--^f--x'-^ (WH) ayT^y^yco^l- ('N-y 

[0 14 4] 02 5ii. :2y7-y'ymMMWicmmt 

Ti/^5o i:cDfi»Jtfev^T{i> ny^y^yiD (CID) . v 

-r-b^XID (LID) . URU fej;t>"'>*-^-'=?--5' (W 
M) :^^ts^y^miU^nri^^m. EKB. nyr^^'y 
4^-Kc^;l'-h+-KRT'Hf^{tL/cr-^ (Enc (KR, K 
c) ) , mmm (Cen) . ^-y^{cS-j~t4fi!c$nfcr 
v'^'/VS^ (Sig (Header) ) , n yf-y^y^=i ^ 
^y^^-KcTBg^fbL/cf-^ (Enc (Kc, Content) ) ^ 
^^r-^ (MetaData) 43j;tfv-^7(Mark)*^|BSJ^ 

[0 14 5] -^t-^f-v-^ti:, nyf-y^yortgpii: 
ffli6jA$nri^St(DT'fe-S*\ 12 2 4 ^02 5K5^^ 
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ry^ytciltojASnTv^S'rifS^ffljStc. A^-offimtcit 
m^ctii'iujmtr^^o m-^r. ^(D^yf-y^^. 

[0 14 6] ;><^'r-^'«. i/^^y 

[0 1 4 7] 0 2 6 ti. iEB^»hLT©^i^MlilIHI5«cO 
^(C*5lt5^|E^ (CA : Certificate Authority) if^ 

tuc. muMK^^7'i^^)vm^^nimLxr?f& 
^nSo cco^mi'^^^^x^i. -^-YH^yx-tt-zu (s 
fctinyry^y-'t-z^s) ummmmm. u-^x 

l^HUfclSfft^cQT. a— a-HfiD. /^X7- 

20 [0 1 4 8] 02 6ti:4bnt;i,^M^iI0Mti> lEB^Sco 
y^^. y-f-tyxv-/^ 4 *WBB»©f'Jffl# 

(a— tf) {cWLTfiJ»30tt5liEB^«<DfflLS^. rv"' 
^f^l/g^tcfflV^fcT^l/ri'UXAs 4oJ;yV^^><-^. M 
(9-l'-tzyX-9--/W) 0«lu. |IB^»(O^X*)ffl 

^-r-byx->f-/-? 4 {c<fc of^^^rnfcxv^^^vs^AH^ 

30 T/N-y>^aMi(%iifflbT4)j!c$nfcM-yi/affltca-5 

[0 14 9] y-FiDf fcii';-7iDfi. 01 
2(Dm(Dii-^. f/uxox&ni.i rooooj 
TfUx 1 -entf ro 0 0 1 j t-sn. f^UT. 1 

sTsnJi" ri 1 1 ij t^n^o cco^t^^iDtcS-:? 

V>T. ^«rVUX (xyf-^r^') A^7U-1ifiSc«if 
©{4S (U-7f fciiy-F) miag-r^.xyr^'r-r 

40 [0 15 0] c(D^oic. nyxy-y^fijfflt^otci^j 
g;S:7^-byx%. uyTyyti^rmLXmint^^ 
^Kt?>^tK^*). 3yr>'>y(0Ba^*^@sWTt)n 

[0 15 1] S/c, 7 7'1';1'7*-V>y h;&02 SlC^ 

ry^y^. ■^y^-^-^yV^ffbxmiMt^^'^ii^ 

Wl^ SDMI (Secure Digital Music Initiative) ^tl^c 

50 ^ctmmtmo 
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CO 1 5 2] -^^K. rn^li. 02 7{C5^^nS<t3 

m<D^MiC^Kl. SDMI (Secure Digital Music Initial 

ive) m^tbr(D^^<D?d (Portable Device) ^tc, 
f-x 7 ^7"^ O-rS C il*^nJt^t^So 
[0 15 3] :kic. mz 8«7P-f-t-h%#Jlt 
T> ^^-CT^Mjb^ftktD^^-rT^h (m«. PD) 

[0 15 4] mWc. 7.r-y/S 1 9 1 IC*JV^T. CPU 

$n/cJi^. Xr-yys 1 9 2(<:3i^, CPU 2 1 ti. U 

mm^mtau mm (v-r-byx-9— /m) cd^^^si 

»tc{#D$nrt/^^rv'^;vw^i^«^"r?.c 026^ 

m^LXWmLrci:.')\^. ^.lE^ (7 20 

*':-J?t5c ^?.tc. CPU2 Hi. liBSt©;^-^^-^^"^ 
#:tc L T/ N -y i/ i MiJ^jiffl t T/ N y a ffl^rS^f 
5o ^LTCPU2 His ?^l^?n/'c/N<y5^:xffii:x f'J^ 

^ b T^# 6 n/c/ N -y a ffl %l:t« M 
#*^-Scrn(i\ ;><'y-fe-v''«*ffl^nfcfe£DTii*l/^ 

[0 15 5] Xr-yT/S 1 9 3tc*3V^T. CPU 30 

jS*^. iiE0^»%EKBt?i^iiE-r?>5aa^iiiT-ri.. i^©^ 

liEMi^ !IB^«{i:^$n§'J-7lD (02 6) tcSo" 

J;f3tTbn5o co^tiE{cov^T> EI2 9i;03O^# 

[0 15 6] l/^f. 02 9tC^$n§<t3tC, 
y_7^_K 1 0 0 l^WtSr/UXA^y^-^'^n 

fcr/W7,T?$.?.ilt§o 03 Otc^^n?. 40 

T/UX (U-7) ItSB^^nSo C^EKBti. 02 9 

icmf^'ffUT. ri 00 ij :&U3K-^-r§fc46tc. 

:^^-KR.K 1 .K 1 O.K 1 0 0^Hir1"SEKBii:&oTl^ 

[0 1 5 7] >;#-^f /wx r 1 0 0 1 J J^^no^r 

cD«j-7«. Mff$nfc;i/-h4^-K (t) RM#-r 

^SU-7tt. MiT^rnTV^*l/V-K+-KO«:. X 
A-rXF^t^jftTV^^O-e^ Bg^{b:^^-Enc (KO. 50 
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K (t) R) ^-KOtCcfcoT^^-rSil^'T?. M 
ff^b-h^^-K (t) RWf-r^CtA^TtSo 
[0 15 8] $/c. 1 li-XT©';-7«. 

Mir*nTV^%V>/-F+-K 1 l^fflV^T. Enc (K 

11, K (t) 1) ^/-K+-K 1 UcX-oXm^t 

^^tx\ Mify-F^^-K (t) i^m^f-rsci:*'! 

3 Enc (K (t) 1 , K (t) R) 
-F4^-K (t) ncj;oTS^§-r5ci:-?\ Mir;!/- 
h+-K (t) RW#-rS^ii*^Bitgt^;s„ y-F 
1 0 1 coTiitU-7li:ot/^Tt. IsHttcMlf-'l'- 

F+-K (t) R^m.mt^!^tmf^xh^o 

[0 15 9] U#-^$nTl/^^V^U-74^- 

K 1 0 0 o^^-rsf-v^x r 1 0 0 0 J li. iE<^)U 

-7*-K 1 OOOT'Enc (K 1 00 0. K (t) 10 

0) ^m^tx. y-F+-K (t) loowf-ri. 

m^m^t. Mff;V-F^-K (t) RW#-r?.cii 

[0 160] CtlicnLX. U>K-^$nfcx/WX 

riooij a. gB©'J-7ois±<DHfTy-F+ 
x\ ^m. H«r;i/-F+-K (t) R^^nm-r^ntii'^ 

X'^r^^\ 

[0 16 1] U4<-^'*n-ri^*i/^IEai&-r>^-<X (^ 
^-rryM) lcl±. 03O{C5^*n.5'r-^i;:5f^'% 
Wr^EKB*^ 9-i'-tyx-9---'M*^P)BBflSn. ^Mi 

[0 16 2] #^7^7:/Ftt. ^<D^^^n 

mbXs Eimmmmn^^tti^x^^. cmumm 
^t^m^mmt^mrnxm. 

[0 16 3] mtfx 02 9<Dy-7 ri 00 IJ CDID 

(U-7ID) ri 0 0 1 J rij roj 

roj rij (D4e>y FilLTffiSU «±{ut:7 FA^ 
ibUm. Tfie-y FtttJfoT. yV-^rzE^Ctti'iX 

^^t)'m-^mi^-sn^o cmi^xii. (f-yFAM-e 

[0 1 6 4] ID ri 0 0 1 J ©*±j4t:'y FAMT-fe?. 
A^?., 02 9£D;l/-F+-KR?b^P.fiiJti:3itfo EKBCDS 

^(^■$1^' m^oo:>^^) fi. 0 : (o. o) XhK>. 

mn^Mts^tti^xt^(ox\ y-F^-KUC/t 
[0 16 5] y-F*-K icTfewy-Ftcl 

t?o ID r 1 0 0 IJ CD2#icoe-y FiiOTfe^A^Sfe 
MicMtSo ^m(D^^li. MiJoy-F^-KOcDT 

{4©r-^(DW»^g-rt«-e$.D. y-F+-KicD 
dcD^^ii. 03 0tc^;jn§J;9fc. 2 : {o. 
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[0 16 6] $6(C, ID ri 00 IJ c7)3#@«Dlf-y h 

-^f(D#M^5^-r^^' (#^3©^^^") lis 3 : (0, 

0} Tfeo^ m^iicf-^^^t^^'Dtn'^iti^o 

[0 16 7]$P>tC. ID ri 0 0 1 J OftTffitf-y hii 10 
1 1 {cW)£-r?>fc'^T-35i9, K 1 0 0©"Ff4«r-^« 
5 : {0, 1} t^-fe5o t*eoT. mmi. r-^^^^S 

ftb^v^eiifc^So /-F ri 00 ij »c 

(ifcHDSlt^t/^Ciitc^S:!?. ID ri 00 Ij cOrVU 

CO 1 6 8] cntc^^LT. m^ii. ';-7^-K 1 0 
0 O^W-rSrVUXIDli. ri 0 0 OJ T-feO. ±3S 20 

tT^i:. y-K ri 0 0 OJ {c/S:Ht)«<Ci:*^T't 

;i)o t;eoT. ID ri oooj cox/wxtt, lE^^f/^ 

[0 16 9] 02 StcMoT, CPU2 1 tt, Xy-^fS 

-^'^nrt/^'Srv^^^tcii, Xr^ys 1 9 6tcji^^. 

^^fTt^» 30 
[0 17 0] t^£t>^. M2 6{i:^^^n5<i:9tc, tEB^ 

g« (Sig (Header) ) tmU-^n^o -r^t-^. 
l^Mii^ffl</^T. rS>'^?;l/gi&Sig (Header) ^m^L 

xwbtircT—^ (/Nyi^aii) ^> Bi2 5tc^$n?. 

Header tC / N -y a M^^jiffi LTlgW? nfc/ n -y a IB 
i:^jt$5-r5i:i;i:\ S^A^-gCfri/^tlif. Header;(3^ 

[0 17 1] 7,r7 7°S 1 9 7}i:fcV^T, CPU2 It*. H 
eader*^B5(S5nTV>S*^S*^^W^b. Sjtt^nTV^ . 
fslfnifs Xfy-fS 1 9 8tcl*. -^^-^-v-^ 
^^tliET-So Xr-vT'S 1 9 9{C*3l^T, CPU2 Ui> 

^^tcti. T.T-y'fS 2 OQK'M^. CPU2 1 ^'x 
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[0 1 7 2] Xf>y 7°S 1 9 1 {Cfc'V^T. rV^?;!/^^ 
*^#fiL.iQ:(/^i:fy^$nfcii^. Xr<y^S 1 9 3tct3 

>y7°S 1 9 5^C^5l^T. |P^»^EKBT-1^|iET5 C <b*^ 
-pt*/)^ofci:|iJ£$n/cJi^. Xry^S 1 9 7lc*3 

v^^ii^iJS^n/'c^&s *fcJi. Xr>y7'S 1 9 9tc*5 
</^T, •>t-^-v-^'t^x>y^7'^ NO^±:^^fBai 

snT>/^i)i;fl£$nfc«^. xr-y:^s 2 0 ncji 
[0 17 3] ^icDct^ic. tmmm'&m^y^^yx 

■9— /^4*^p.a-+f'{cBB^pL> nyry^yf^^Bftc, -r 

fjiziyfyy (DTikm^Wit ^cttfX'^^o 
[017 4] -^^a— :5»-v-^;grny7^y>yf'^ 

[0 17 5] ^OlSm. -afffi!c$n/cn>ry>y«. 
[0 17 6] ^P>tc. 3yr>'^y«^ llffllllff^^? 
?,ayy'y^y(Dmm^W^-^ic^^t^ctmmt 

[0 17 7] V-^OflJfflT^atCOt/^TlfJB^-r 

ny-fy^yicv-^^Mfira^nSo 

[0 1 7 8] 9-r-tyxi:3yf y-yti, i^^^wM^ 
(cssfci6, nyf-y^ytDffl^cDffiffli^iJi^^-r-feyx 

fl[)<t9{c, 3yxy^yt€ffl<*Ja«:f>l"i/P-r5<ii:fi:<fc 

7'i'-by7,-ecowa^L^A^p>fe. m<^):3y-fy 
7 ^©a-r •§) c Biftg h ^ § o 

[0 17 9] (KDV—^tCtt, ^J^(J. 03 ItCTjsSn 

^iiolz.. a— *f©ID ('J-7ID) . FjT^^f77'^^, ^ 

[0 18 0] 2 etc, v-^'tCJi. U-7ID, ^Wtll7 

so*(/ > T ^fi!c $ nfc T ^ :6^"f^ip ? n § „ 
[0 18 1] fmmyyfit. ^iJ^ts\ m^©fflPt§/£tJ- 

3yxy^y«:<5efflnl«gi:t5v-i'-byx«:. *C»ttH 
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Kim-sn^o mmmphmu. -i>f-yy(DW. 

[0 18 2] ::i\£~^m^lt. ^n^T't^-onyx^ 
[0 1 8 3] i^tc, 03 207P-f-V-l>^#M§L 10 

[0 18 4] mWc. Xx-y^S 2 2 1 {C*3l^T> CPU 

[0 18 5] Xf-yfS 2 2 2fi:feV^T. CPU2 1 
(DA;':tcWJSL.T^^-byX-9--/^4{C)ltttT7l''ty 20 
[0 18 6] dcDS^tJtJSLT. 03 3(D7n-f-V 

y^-^y7.^m^^m^rcibicizmrjiMm^m^^Lx 

<5 (03 3<0X-r>y:/'S 2 4 2) o ^c:T% T^f-yf 

s 2 2 3{cfc'i/^T. ^^-rry h i ocpu2 1 a. ^-r 

[018 7] a— <f{i. ::^Da,T^^ca-3v^T. }i/TN$n 

v>T, A;'7gP2 6*^e.^«|iM^S^A;':-r5o 
[0 18 8] CPU2 1 Bs Tsf-y-fS 2 2 4{CfeV>T, 

A^jg|5 2 6:6^P)(DA^(i:S-j'i^T. a-f"*WN$n/c 

^{Cii, Xr-y^S 2 2 5tl^, ^-T-byXI)— ^^4 
[0 18 9] ccQTSaa^SfS-rSi:. •7'f-by7>^j- 

77^^f3aLfcV-^^3IMLT<5 (03 3<OXr 

>yys 2 4 4) = =i^X\ Xr-y7"S 2 2 6^c^ol^T^ 40 

i'7'i'7y h 1 C0CPU2 la. •7-Y-feyx-9-->'^4A^5) 

Xf-'yT'S 2 2 7{i:43V>T> S 

ttfXo fc V- ^' 3 y f y tclifejAt^jaa^^tTf 
So f^b-fe. iintcj:*)^ Rv^s^p.n/c^'1'■tryx^c 
jk^fS-f'Snyf-yvox'-^'^LT, 03 Uc^sns 
J; 0 *RfrW«l77^^*^l3ai?nfcv-^^*^3yr yyfc 

mtTiB^^nsiitic^So tfc. (loiit. CPU 

2 Ui. ;<-y-fe->>";b<MfrSn/'cCi:ic;5:i>OT% 

(02 5) feMirL. iagl!«WciB®-r5o 
[0 1 9 0] Xf-yT'S 2 2 4t43t/^T. ^-r-byX-y- 50 



fja2 0 0 2-3 5 9 6 1 6 
32 

nfc^^. xr^yys 2 2 s^zm^j-. cpu2 1 

[0 19 1] CcDJ;9^^7^7yh l»ifcWJ55b 
T. ^'l'-feyX-9--/Mii. 03 3<D7P-^-¥-h{C 

[0 19 2] irrj:t>%^ a^!J^C^ XxyT'S 2 4 HC*3 

l^T. 5'l'-!2yX-+i--/McDCPU2 1 a. ^^-I'Tyh 
1 ?b>P.5'i'-byXRi/^^D OS**^jMfi2nT < S 
(03 2(^Xx<y7'S 2 2 2). cin^^tt^!?. X 

T--y7'S 2 4 2K43i/^T. ^^i:?nTi/^5-7i'-tryx 
oHv^S^'^^c^2:^S^Mffi^sa■iSg|5 2 8*^6.M*tiit. c 
n^^^^-rry h i tciMfffSo 

[0 19 3] ±aiLfcj:3tc. ccD<i;'5tcLT^/TR$n 

7«1"5*^S;b^coa»]Mi$nT < §o 
[0 19 4] -f-C-e, Xx'yT'S 2 4 3Jc33l/^T> V'l' 

-byX-9--/McDCPU2 1 ^y-^yyV lii'^JW^ 

¥ij^tfc«^. Xx>y7S 2 4 4ti:jt?^. *f^i:*n5 

^'I'-feyxcDHi^gj D %g-r 'y -tr- i^'^^tyv-^^ 

nfcv-^«. ±MLfcJ;9{i:> i'^-rTyMOsaii 
gl32 8fcfcv^T, W^S'Ti.ny'ry^ytclB^^ns (0 

3 2£DXr-y7S 2 2 7) o 

[0 19 5] T.'rv'/S 2 4 3tC*3t/^T, ^•7l'7y h 

Xr^yT'S 2 4 4 £D5ail«X4^ ^y^^nS. t^t?-^. 
iiQl^tcti. ^-r-tryxoMv^BiDSaa^^jm^ie^MT 

[0 1 9 6] 03 4 a, Xr-y 7s 2 4 4tCi3V^T. ^ 

-r-feyx-y— /MA^e.^^i'Tyh i icwtTii^i^n 

(Da-+f'cDU-7ID, pM1S7'5y (Own) . MtftcU 

-7iDiiRfTWIl7^^"^. ^-('•byx-9--/uoi$^SI 
S (ca-3V^T4fiSc$nfcrv>"^';l/S«Sigs (LeaflD.Ow 
n) \ZXK>. V-^'A^iRfiit^nrt/^So 

[0 19 7] JlcDV-^a, #^©3.— >f(7)^£ 

coayf y'ytc^i^LrcO^^iW^^cfefiO-r-feSOf-, 
i:^ti5ny7^y>y7!>^3e-^nfc«-&ti:B, ^tDnif 
- $ nfc a y X y {c j«t 5 V- ^ aM?i) i: $ o 

[0 19 8] ccDj^^icLT, 3y-ry^yii'7-r-feyx 
^"^mL. f£ffl^ff^^^-byxjcm$-^5^^(c*3 

v^Tfe. m©:3yf-y^yo^jeffl^*iJifctsi;/c-9— trx 
[0 19 9] :^^fc, ^'Viz-i^y^^'icot/^TlJiBMSo M 
:fevT«. nyxy^y^SStss-r^ciijb^-etSJ; 
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Tft^nSo ccD^VU-ey^^ti. file*, y;l/-7*l»lc 

WrE-t^it 5 o i: i . tf y S c i: 

[0 2 0 0] =&IS§l«r^*efiiLT^3< 21 

[020 1] i:cD«-a-. a— tfti. 

[0 2 0 2] rnWlc. 03 5©7D-^-ir-h^#S§i; 

T. ^y-^ryh iy)i-\£y^^l!imtrs^mw «E 

fe'V>T. ^7'l'7yM<0CPU2 Hi. ^')V-\dy-!f<D 

[0 2 0 3] ^XiC, 7.r-y7°S 2 6 2fi:ji^^, CPU2 1 

>'>y-9--;^3tc7^-trXbs Xx-y ^ S 2 6 3 {cfeV> 
Xr-y 7'S 2 6 1 cOfflilT-fM^n/clIB^tf^ny 

[0 2 0 4] lIH^SilLTti. ^-f -byX^j"-/^ 

[0 2 0 5] u±(Dmmii. ^fi-\£yi^nmttti^ 

^xcommmio. 30 

[0 2 0 6] 03 6cD7n-f--V-h^#fi§L 

T. 0 3 5 cD^^-r7>' h 1 ©|iEW»©S^®atS^JES 

bxnt>n^ =1 yf-yy^-/^ 3 ©SEW^wSg^Maf;: 

[0 2 0 7] Xf •yT'S 2 7 1 {i:*5V>T> 

T>"y9-— /*5 3COCPU2 1 ti. ^^-l'7yh 
$nTtfdiEB^«%^it1"§^^ Xr^y^S 2 7 2(c*5 

[0 2 0 8] «±<^«iim ^;i/-:^mii$n5iss 

^fcfTt>n5o -^-fDlp^. nyry^y-9--/^3OiB1S0[3 40 
2 8tcii, m^iii. 03 7{c^$n-5<fc'5tc, 

fete. ^<D^vi/-y^^jt-r5x/ux©fiEw«*^^0 

[0 2 0 9] 03 7(C^$ni.P7-ti:. ^^Vl/-:/ 1 ^DtiE 
B^»i:LT. iiEB^»C 1 mmc 1 4A^SiS$nTV^ 

cnsfDSE^^c 1 iTbSc 1 4{c{i. wis-rs^ 

[0 2 10] mm^c. ^'}v--/2(DmmttLx. mm 
«c 2 1 n^c 2 3*^s®^fnT:teo. <ine.«m-r 
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[0 2 11] J-)(±Ocfc^*^';l'-y*«fi!ct-S=&il^S 

tc, ^cOtiEB^»A^Sil$nfc«ffi{i:*3V>T> =L-^-h^p3 

^(D^)\y--:fKmt^mmic=iy7-yy(Dmmms^ 

[0 2 12] mWK. Xx-yT'S 2 8 1 tC*5V^T, 3y 
ry^yHt- >'^3cDCPU2 1 121*0152 SfcfBH^nT 

[0 2 13] ClcD^^liEffiativ 02 9 il03 O^^RSU 

n^o EKBti, nyf-y^y9-->'<;3{ct, ^-T-tyx-y- 
[0 2 1 4] xr-y/s 2 8 2{cfci/^T. nyry^y-y- 

-/U©CPU2 n±. Xr>y7'S 2 8 1 cOltiEMa<D*S 
S 2 8 31C*31/^T. CPU2 1 ti. XT-y7°S 2 8 2C0Sn, 

^^Bf^fb-rS. Xx-yT'S 2 8 4ti:feV^T. CPU 2 1 

a, timt-StX^^)V~-f(0^mmiC. Xf--y7°S2 8 

[0 2 15] mSHC^ttl^^^/V-'/KOo^. PJk. 

ti\ iiEB>^«C 1 4 A^■U4-^-^^nT^^5i:•r?>fc^ Xr 
•y^S 2 8 3©5!!,a-r\ l?iJ;?.ti\ 0 3 9 tC^^nSi d 

[0 2 16] -r^ti-^, 0 3 9 0^JtC*3V^Ta. nyr 
y^y^KcA^ fIBH«C 1 KD'j^mmKvu , MtC 1 

2«i^ii^Km . ttc^mmmc i sw^^r^i^Km 

[0 2 17] ayry^y9--/^~3tD0 3 8{C;j^$n5=fc 

-:''(oiif§ (^7-r7yh) a. 04o<d7p-^^- 

[0 2 18] aWtC. X-r-yT'S 2 9 1 IC*31^T. ^7 
^ryh l(DQ?\}2 Hi. 3>'xy^y+)--/*5 3*^03 8 
OXx>y:^S 2 8 4©i!iaT-3MfILTt/c:3yx>'^y 

3yT-y'y^i:i:ttcS{i-r5o nyf-y-y(i> ^ 
yry-y^KctcJ;*), 0f^{t2nT*3!3. n^xy^y^ 

fb^nrv^?) (03 9) o 

[0 2 19] ^CX\ Xf -y/S 2 9 2tCt5l/>Ts CPU 
2 1 li. Xr-y^S 2 9 1 cDfflaT-SMLfci^^wa 

^LX. m.nLrz::3yf-yym^M^^X=iy'ryy(Dm 

[0 2 2 0] wmi. 03 9(Dmic^tn^mmmc i 
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[02 2 1] mmcoi/mii. mmmc 12. ciskm 

trik^yy-y ymicif' ayf-yyicimLxmi^nr 
C3S:V^coT\ ayy-yymc^mnt?>!itilir^^-rs 
U-oX. ay7■yymu^Kh^X:ny7■yy^m.^t^ 
Ci;A<T't*V\ 10 

Co 2 2 2] Ji(±{c*5v>ra, nyxy^y*- (-r^t) 

y^n^cti^^mxh^,. 

[0 2 2 3] J.)(±©<t9{CLT. ItglJ^y;!'-^*- 

tSJif ?)ICV (Integrity Check Value) ^ffll/^-ftC 

^';l-ficmffit^<Dicj^\/^X^^^o 

[0 2 2 4] *fSBg(c*3V^T(i:. ^^-trVXt^x -y ^' 

ai^-Lfc^t^ctti^^mtsn^o fit. i:ne>co 
jaaasDMi x^nb^nroi-Mcm-^^^x^iitJti^. 

[0 2 2 5] 114 1 i:gl4 2cD7n-f-v-h% 

f - X >y ^ 7 -i^ h jaatcoi^Tifjg^-r 5o 

[0 2 2 6] mWlC, 0 4 1 cD7n-f-^-h:&#S^b 
TfficD^^-f htC7-('-try7,^f-x'y^'7'> hi" -5 

3 0 UC*5V^-r. i'^'l'7y h 1 C0CPU2 Ui. 5^ 
x-y^7'^ hW^Ov-r-tryXOf-x-y ^'7'> MUSSfN 30 

[0 2 2 7] Xr'y:/S 3 0 2tct5l^T. CPU2 ' 
Hi. ^x>y^7t/hm<^»^'r-byx©g;*:f-x>y^ 

[0 2 2 8] ^UT. Xr-yys 3 0 StCfc'V^T. CPU 
2 1 fi, XT^^y^S 3 0 1 (D^rnxM^^i^tltc^x-y 

^T^yVm^N 1 Xi-y'/S 3 0 2(DmMXM.^M 40 

^ 7 h UlSSl N 1 X -y ^ 7 MUffN 2 J; 0 ;^ 

[0 2 2 9] i'xy^T^hmm ItiK m±^xy-> 
7>>h(illS(N2 j;f3/^$i/^i:WS^nfc^^. Xr>y7° 
S 3 0 4{Cji*. CPU 2 1 a. ffi?W<OSB (^x>y^ 
7'>h5tO^'5l'7yh) tD'J-7+-%ffl^f@^'0g 

jl>f^i:$nTV''5^'l'-b>'XIDfc^^jSLr|B1ig|52 8CD 
^x>y^7'>hUXHcsB1t$-a:5o 50 



002-359616 

36 

[0 2 3 0] ^tC. XX'yT'S 3 0 5lC*5V>T. CPU2 
Hi. Xr-y^S 3 0 1 cDifla-eil^^P.nfc'^'l'-by 
X®^x-y^7'>Meli(N 1 1 fclM^^U^y 
ht^o Xr>y:/S 3 0 6tfeV>T> CPU2 Hi. ■7-1' 

-tryXtD^-y-tr-i/tcS-iii/^T. ICV^SS-fSo CCQI 

cvtcov^Tti. 0 4 6nsm5o^^m.Lx'imt^o 

Icm^^^-'Xy-^'tyXtDim^^^t^Ctif^nimt 

[0 2 3 1] Xr-y^S 3 0 7tcj5V^T. CPU2 
Hi. f-x'y^7'>hW^O^'f'-byXi:. Xr>y:/S 
3 0 6O5!iaT'Mli^n/c:ICV?r. 

m^^x^mitLx. miisi::fmmmtti.ic^ m^m 

(OmmimtlL. nlf-$-&5o Xr>y7S3 
0 8^Ct5V^T. CPU 2 Hi. Xx-y^S 3 0 6(D^mX- 

yxmcMf&LXB^^z 8 (Df-x >y X h ft'tclBli 

[0 2 3 2] Xf-y-fS 3 0 3tC^3l/^T. f-x>y^7'> 

h [H]|!C N 1 A^S X 'y ^ 7 7 h 0l?S( N 2 J; D ? < * 

^/^ (^ij^fi. iiti/^) mm^ntc^-^. tti^fps^ 

n^|Hllg(fct5-^x>y^7'> hA^fft3nTl>S(DT'. iin 

tX±^x-yi'77h%lT9c:i:*^~-et^v\ ^uf-. X 
■f-yys 3 0 9tCl^^. CPU 2 1 ti. x^-JfliMllff 

•rso -r^to-s. ccDii^. ^x7^777hMi^tT 

[0 2 3 3]i^tc. 0 4 2«7n-^-ir-h^#-^b 
T. 04 lcD5^x-y^77hJQ.ati:<tO. ^-f-feyXcD 
^x -y ^ 7 >> h 5r ^ •7'C 7 y h O^SKOV^TiK 

mt^o 

[0 2 3 4] mmic. X-r-y7S 3 2 1 fCfc^^T. tS? 
illSS (7-f'-t:yX^f-x-y^77hf 5^^'<7yh 
1) tc. i^g#®'J-7^-«r3Mfft5o i:©y-7 
^-ti. Xf-'y^S 3 0 4(c*5V^T. ^MJ©^^'f7 
yhictD. ^-THiryxiDic^tfjtstTlBltsn^o 

[0 2 3 5] i^lJtC. Xf-y/S 3 2 2tC^3l/^T. CPU2 

Hi. m-%<^'Pv^7yY l*^6Hf^fk$nfc^-r-tr 
yx ICVA^ EKBfc J; yfPMi: i: t tSlfSStiT t/c 

c:n^§{i-r?.c, •r^t>-§. iicD^-r-tyx, ic 

V. EKB*5J;tfi^EWS^i^ 04 lc7)Xx-yys 3 0 7«Dffi 

[0 2 3 6] Xr-yT'S 3 2 3tc*3(/^T. CPU2 1 ti. 
Xx>y:/S 3 2 2C»S!lST-^«Lfc7l'-tryX. ICV. E 

[0 2 3 7] i-X±©<t5ti:LT. ^-r-tyXOf-x^y^ 
77 h^Sttfc^"7-r7yh Hi. f-x-y^'77h^S 
ttfc^co^-Y-tryx^MfflLT. mscnyf y7^S 

^■r?>Ji^. 04 3©7P-^-\'-hli:^Sn^5tta^ 

[0 2 3 8] -r^t?-^. Xir-yyS 3 4 1 iCtS 

VT. ^v-('7yh 1WPU2 Hi. a.—^i.^X-h% 
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f ?.o ^LXs Tsfy-fS 3 4 2^C^3V^T> CPU2 1 

So 

[0 2 3 9] ^^tc. Xr'y7"S 3 4 3tc4oV^T. CPU2 

So ^ilT% T.'fy'fS 3 4 4{C-r-r*s CPU2 1 lis 

[0 2 4 0] einfcWLT. Xx-yT'S 3 4 3(C*3V^ 
20<DICV*^-iStbSl/^^|iJS5nfi:«-&> ^-T-fe 

S 3 4 StclJf^. CPU 2 1 ti. X'5'-$ail^^fTl" ?.c 

[0 2 4 1 ] i^tc. J.X±cDj;3lcLT. imi^y-fjy 
hf<:-B^x-y^7'^hb/c^Y-tryX©^x-y^''i'y 20 

[0 2 4 2] RWfC, Xr-y^S 3 6 1 {CfcV^T, CPU 

•/S 3 6 2tcfcV^T, CPU2 1 (i. Xr>y 7°S 3 6 17- 
W#$n/c^x-y^f y^^O^'i'-tryXA^ g^^g* 
*WffliJSBt^:^x'y ^T-^ h trc^'T'feyx-p^SA^ 
§A^^¥iJ^-r?>o CcD^iJ^ti. 04 l<DXr>y:^S 3 0 30 

yxiD{cS-:Jv^Ttft>nSo ■r*t)%x xx«y:/S3 6 

1 «i$n/c';-7^-, ^^-feyxiD, feir/icv 
f)\ f-x^yi^r-^ h';xb43ii:|B1i$nTV>§/3^SA>A^ 

[0 2 4 3] ^'T-byXA^ @^^g#:ft^'^x-y^'77h 
L/ct^T^Stt. Xr-yT'S 3 6 3{C*5V^T. CPU 

2 1 tg#ffl!J<^)^l<^>^'l'-tryX. EKBfeJ;tfSEW« 

OffJPt^g^-rSc !t3z!?t-5<fc^{Cs ;iOS5t<Jc*-t5i^ 40 

»^^ff1"?' (0 4 SOXr-yT'S 3 8 3) c 
[0 2 4 4] Xr-y 7'S 3 6 4{C43V^T, CPU2 1 

-0f-x>y ^'Tt; 1- L/t^'f'-byxA^sy'f-x-y ^-ry 

?4aTtfc07\ ^cD7-r-feyxcD^x-y^'7'> Malic 

N i^ircttx^u^yh-rso 

[0 2 4 5] Xf->y7°S 3 6 StCfe'V^T, CPU2 1 it. 
tMJOgfitfte(D'7'<-byX%f-x>y<:'77 h LTi/^ 
5*>§7b^^W^U S/-f^x>y^'7'i7 hLTV>5flfi<D^ 
-l'-byX*^l¥ffit*V^^^{c«, Xx>yyS 3 6 6le:Jl 50 
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3f.s CPU 2 Hi, ffi#(ll«ga«^x>y^^'yW^«JII 

ilbT©f-x >y^77hU X h{C*3(t§fSti«r|iJltt 
5o <:nt*fUT> Xr-y7S 3 6 5fC*5l/^T, ffi^il 
tOgfitf-x y ^7^ Y LTV^SffitO^'T-fryX^^Sffi 

•rs i:|iJS$n/ci^tcii. fto^-r-tyxw^x ^y ^' 
-ry^S:tti>oItgtt;6^$.SOT\ Xr>y7S 3 6 605a 

fiax4^'y:/$n?.o 

[0 2 4 6] X-r>y 7'S 3 6 2tCfeV^T. ^x-y^'TV 

)pt^ $ nr 1. > § ^ Y -b y X g 57- g **^'tB¥ijas 

t^x-y ^'7'> h Lfc^'l'-feyX-rt±^V^i:*iJS^n/c 
CPU2 1 ti> Xx-yT'S 3 6 7(c>i^^. x^-^iQ. 

IS•r?.^'^'■tyx-ea^v^c:i;^c:Q:?)CD■f\ ^x^y^-r 
y5aat±^tT$n^v\ 

[0 2 4 7] a— tf7)% ^-r-byX^&^iEKni^-Lfu 

.t^^^tf^. tati^nTV^SICVcDfilt. Xr-y7S3 

6 1 (DmiX'm%tnrcy'<^yxi,cm':s\^^x'mw'^n 

fclCV<Dii*^S:&5fe<Di;ftST\ ^x-y^'TyT't* 
[0248] |2145i±, E4 4 C07P-^A'- 

n V -t y X CD X -y ^ y 5!ia%Mf f i. ^ 7 7 

yhtc^fLT. g53-g#:^^~WbTi/^i.^'l'-tryx?rg^x 

>y ^' y 2 -^i ^7 ^ Y 7 y h CD a ^ « L r 1/ ^ s o 

[0 2 4 9] Xr>y:/S 3 8 1 tCfel/^T> ^'^'f'7y h 
1 ©CPU2 1 {i. ffi^tJOSH (04 4(07n-^^- 

htc^-r5aa^^ffts^'7i'7yM) t'j-74— 

i:^x-y^'f'yW^£D5'l'-feyXCDID^3^{fr§o ±ai 
L/cJ;^tc. ffi¥iJC»gmv Xx>y7S 3 6 1 tcfc-v^ 

ilcDU-7+-i:^-f'-byXID^lXI#b. Xr-yT' 
S 3 6 2tcfcV>T. ^n(ca-C)V^T, f-x>y^l'y^>r^ 

£D7-r -t y xco^iEsaa^^tTi" 5c 

[0 2 5 0] Xf--y:^S 3 8 EtfeV^T, ^■7'l'7yh 

10CPU2 Hi. ffi^iJiDglA^e.'yl'-byXcDilM 

E^J5:^x<y^Yym<07'r-tyXT-fe5«-&. ±ai 

bfc^^ic. mmm'm^i. Xf-y7'S 3 6 3cD5!lS 
T^-r-feyX. EKBfcJ:tf|IH^ScDSiJI^%S5l?L.T< 
5o ilcDS^^gfibfcii^. Xx<yy^S3 8 

Stcji*^. CPU 2 Hi, ^^'-byX. EKB43j;tf!iE0^«^ 

gyi5t-r«o t^£t>t>. cruc^^s z.<D^y^7yv\ 
iUiS^fD^-r-byx^sfSfflT-^iSiv^t^Hiii^t). m 

4 40DXr'y:/S 3 6 4<D5!iaiC<l:D> ^x'y^'7'>h 
HI^N 1 if'. 1 /cltf-'^ U ^ y K*n5©T\ f-x 'y ^ 

'fy^^^Tbfcci^tc^i.o 

[0 2 5 1] Xr-y:/S 3 8 2{cfcV>T. ti^tJcDaB 

*^ 6 -b y x®HiM*^S5t< $ nr 1/ ^ ^ V ^ t lys ^nfc 
Ji^. xf->y7's 3 8 4tci*.. x'7-jaa*Wff?n 

So trit>%. iicD^^(c(i. iCVcDffl;b^S*oTV^S 
^©aSC-tt). f-x>y^'-ryA^-etftV'c:i:t;^So 

[0 2 5 2] j-x±tfcv>ra. f-x-y^-i'yii^x-y^ 
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-feSiHiA--7$-tt;|i J; a tc-r § ii h njtg-efe;|,„ 
[0 2 5 3] i^tc, '7^^yx {aytyy^^B) <d 

x>y^i[ (I CV) ^§E/jicUT, 7^-tryX{cmf^lt 

[0 2 5 4] v-Y-tyXcD-Ox^U-r-r • f-x-yiJ'ii 

(I CV) ^iJAti'^f ■t:yxic^-rs/N-y->aHiS[ 
^ffll/^Tltg^n, ICV = hash(Kicv. L 10 
1, L2, • • •) fC<fcoTf|-5^n5c K i c vtil 
C va£fi!c+--e$)?.<, LI, L 2(3:^1' -byXC'Iffg-r- 
hK). '7^'^y7.(DmWmU<D:^-j^--JWM.^^ (M 
AC : Message authentication Code) A^Mffl$tXi>o 
[0 2 5 5] D E SBg^mafil^^fflV^/cM A CM^^ 

n/'c^«yb-v'*M K M2. • • MNiitS) > 

S-f. WWtt (IV) 1 a»gP2 4 - 1 AtcJ;0 

sffi!3Wiiafii-r?> 1 1 tt^) o i^tc. I 20 

l^DESBg^{tg|32 4-l B{cAn> (iUT, Kl 

i:-r5) ^fflv^TBf^fkf 5 (ai;/3^E 1 ii-r?.) o m. 

MX. E lfeJ;tfM2%?S®a32 4 - 2 AfCj;i9gffflW 
Haffit. ^(Dt±l;^I 2^DESBi^ftgP2 4-2B^ 
Atl. UK 1 ^fflV^TBf^fb-rS (m;'3E2) „ J-XT/ 

;&j5S-ro D E S0|^fbg[3 2 4 -NB;6^P,«titi:fcBTt/cE 
NA^/ -yfe— v'lfliE??^ (MAC (Message Authentica 
tion Code) ) t^^^o 
[0 2 5 6] iKDJc^^^Y-feyXiDMACfili: I C V 30 

^^^-\z/syy3.m^^'MmLX'7-<^y7.<D-(yT 

^^Urf •^x<y^'ffi (I CV) *^4fiR$n5o m« 

XlcS^'V^T^^Ufc I C V i:^JtS«bT|Hl-cD I C V 

[0 2 5 7] i^tc, ^-r-feyxcD-ryf-^'Uf-'r • 
y^m (I CV) 4fiic4^-T-$.-5K 1 c v^±aicow5a 

i>o ■r^t)*.EKBtcj;?,Hg^ft>(-ytr-v'r-^^7 40 
'l'-by7.<D-r>"ry'Jr-i' • ^x>y^fil (I C V) 

[0 2 5 8] 114 l^XXSmi 8l,cmWL(Df/UXKn 

^u<DMU^^u.t^rc^<D^yT^'')T'< -f-xy^ 

ffl^^^-K i c v^W55!jfb+-:/n<y^' (EKB) 

1. 2, 3fC«tT^^Rl^*^x-yi'fi^^4^-K i 
c V ^IB«•r5ff<J*T^ 04 8 tir/UX 0 . 1 . 

2. SffOx^UXS^'Jjp-^ mm) LXTfUT. 50 
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0. 1. 2\z1i:iLX<Dh-m.^nWs.^i.y^m±m- 

K i c v^iafi-r^p^/T^to 

[0 2 5 9] 04 7(D^JTii> Mfr/-H+-K (t) 

0 0(cj;oT. ^xy^m^f^^~K i c v^Bf^ffcU 

fcr-^E n c (K (t) 00, Kiev) tt^lC 

rvwxo, 1, 2, 3tc*3i/^T^n^'n«*-r§y- 

(t) oo^m^^mrji^mt^~y^y'> (ekb) 

*4fi)tLTEffl-r?.c ^n€n<Dx/^wxa. 0470 
miic^st^oic. s-f. EKBWi (a^) -r?.;: 

tKi:*). Mif?nfc/-F+-K (t) 0 0^^# 

i^ic, 3tff Lfcy-F^-K (t) OO^fflV^T> 
Bi^ib$nfc^x<y^'{i4^^-E n c (K (t) 0 
0. Kiev) ^m^LX. ^x>y^ffl^fi!c=^r-K i c 

[0 2 6 0] ^CDffi©rV^'l'X4, 5, 6, 7 • • • 
|II-(DWam^-^P-y^ (EKB) ^g{HU-rfea# 

bTMHr^n/ty-F^-K (t) OOW#-r?.ci: 

X >y ^'flt^fS^-^jM^^t-r § d i:*<T't 5o 

[0 2 6 1] -7^. H4 SOMii. 0 1 2(DjlimWXm 

i:'OV^^-^ («) «nTV^i.i:bT. ffiO^Vl'-T' 
(Dyty/^s -tatj^^ "f/UXQ, 1, 2, (CWLTO 
Jj-'^^nmrsimhit^-'^^^'J ^ (EKB) ^±^LT 
SS{atfcPl?fe?>o 0 4 8ti:s^-rwa{b+-^n>y^; 

(EKB) $^x'y^1B4R!c^- (Kiev) ^Z- 
F^- (K (t) 0 0) T-Bl^ftb/tr-^En c (K 

(t) 0 0, Kiev) mmt^o 

[0 2 6 2] 0 4 S^DMiJfCii, «^^)i%^LTfe 
5o r/WXO. 1. 2tt. *-r^ Sflb/c^5a{b4^- 
7u -y U-7^-S/c(*7- F^ 

-^fflv^/c^WIti:<tt5, MDry-F*- (K (t) 
GO) mL%t^. 'AKs K (t) ooicii^mmc^ 
D^x^y^^fa^fiSt^-K i c v^Mf-r^o 

[0 2 6 3] HI 2tC^-rfflO^~-'^-7'«TA-rX4, 
5, 6 • • - ii. (EKB) ^Sftt 

fflv>TSiT/-F4^- (K (t) 0 0) ^m%t^^t 
/-H:^^- (K (t) 0 0) ^m.mt^^ittf'x^t. 

1 a ^ tt^iJ^ Wr i. -rV W Xco**^^ X >y ^ 

[0 2 6 4] CcDj;9(i:. EKB^fiJfflbfcf-x-y^ffl 
o^^lclEai|t?y^®*-^WBIt&t Lfcf-x >y ^{fii 
[0 2 6 5] C(0^of3i'7^-tyX<0-fy7-^Vy-^ • 
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f-x«y^ffi (I C V) ^^l^^Htia*). EKBilBl 
m+-:/p-yi' (EKB) ^i:ttc1gttb/c^rV7 

D . cin^ E K B ^m.^^m1■s.'ffU7.-^mm■^ 

[0266] 049B \,C7r<tmX'i<t. r -f 7*ciE^ 10 

^x'y^'fS (I C V (L 1, L 2) ) ^ISffl-r^^fiSci: 
■rSc ( I C V (L 1 , L 2) ) ti. 7'f'-b>'X 

L 1 ^^-r-feyxL 2{c/N'yi^aMi!f^fflv^Tits$n 

S-^-r-bVT.O't'yf-^^Ur'i' • ^x^y^'^iTfeS I c 

V = hash (Kiev, LI, L2) ^^tTl^?.o- 

04 9 B«iifi!ttc*5t,^T> ^f-cr nc{iiEatc7-r-fe 
1 i:7'i'-tryx2*^tSi^^n, ^-r-tryxL 1 ii7 
Y-tyXL 2tcS-i''V^T4s!c$n/c:Y>"r^"'Jxf • 
x>y ^'fS ( I C V (L 1 , L 2) ) tl^^m^n^o ^ 20 

fc. y-fV7 2te{iiEaic^-r-fe>'7. 1 A^^ga^n, v 
-r-feyxL l^cs■:3v^T4fS^?nfc-ry7^^^Ur'(' 

x>y^ffi (I C V (L 1) ) ti^^mtn^o 
[0 2 6 7] i:cD«)j!cti:4oi/^T> p^rV 7 UcfSffl^n 
tc (EKB, ^-r-by;^2} «r;<'ri'7 2t3Vf-Lfc 
^xV7 2-?\ ^-r-feyx^x'y^ffi^ifrfc 
ic^ijic-r^i;. icv(Li, L 2) *^4fiit$n§ui; 
tc^t). ;/ri'72tc|Slft$nTV^^K i c V (LI) 

^xV7^S4-r-§.rVW7,{c*3V^T. S^Xx 
<y7'cDHijX7^>y:^{cl CV^x^y^^^^ffLT, ^fiKl 

CV^I^ttl CVcD-iS(^¥iJSiJU -iS(b%l^l^«. 

^ ^ -tr y X (DS4^K±-r -5 i: Wt^ t ^ ^ o 
[0 2 6 8] */c. thK. $^14?r;iJ65/c46. 
-byxcD^yf-^^^'Uf-^ -^x-y^ffl (I CV) 
SSx. * -^7 y ^ ^^i6 fc r - (C 1/ ^ T ^fiStf § ^islc ^ 
bTt<fci/\ f^t)-^ I C V = h a s h (K i c V, c 
ounter + 1, LI, L2, •••) ICioTftff 40 
t^Ml&tt^o ti'^y'^ (count er + 

1) (i. I c vcD»t^x.c:i:fc io-ry^';^^^h« 

[0 2 6 9] ^Slc, v-i'-b:yXcD-i'yr^'"Ur'r • 
x-y^fll (I CV) ;gr^-Y-feyxi!|o|-^7''r7(cfe|ft 

7-ff\)7-^ -^f-xyi^m (ICV) ^^-r-tyxiiiiSiJ 
^ rV 7±(cfe|ft t § i: LT cfc t/\ 
[0 2 7 0] ^J^tf, M^ji^^^ffl^x-rT-^jl^fDM 50 
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0^tD3 e-B5±^<0i; P)nTt/^*V^^x^ 7{C v-r^ 

yx^l^lft-r^ii^^ Ipl-^rV7{c^yf-i'"Ur^' • 
f-x-yi'M (ICV) ^^mt^ti CVcD«tm*^ 

v'y±£DS^:&^xV7tc I c vmirtLT. ^-f-ty 

XCn t!— n y h n— ;!/ (^Ij^ifcheck-in/check-out, 
■ove) ic I C V%^ffl-r5^figi:-r5<li:{cJ;D. I C 
V(D^^rj:<Sm^i:Xf^-C^yX<Dim^x >y ^'^^Rlftg 

[02 7 1] <I (O^Pfig^J^^ 5 0 fC^fo H 5 0 X'im 

5)nTV^:^l/^;><xV7 2 2 0 1 tC^^-byX 1 T^M^-T 

■tyxsmffi^n, iinp.to^-r-byxtcM-rS'i'y 

T^'VT-f -f-x'y^ffi (ICV) n— »f~*^gEblc 
7^'-feX-r^ C ilcDH^Bj^n:feV^>txX hV~>y±(?:)$^ 
:&/ri'72 2 0 2tcl!Sli^t> a-+f'tc j;?,^IE^'f y 
t-^Vt-^ .f-x«y^# (I CV) 0»t«5^^K±b 
/if^Jf-fe^o iI<7)j;^^^fi!ti:LT. ^J;^(J;^r^'7 2 
2 0 1 ^g«bfcrV^^XA\ pirV7 2 2 0 1 cDS^ 
;&^t7t?.^tc.t>X I'-x'i/yT'feS PC. ■9--/'?tCfcl/> 

xicv(D^xy^^mnbxn^msm^\^tm 
^ttina. ^lE^ne-v-r-feyx^sv^ti^Hvi' 
■tyxcos^%i?S±-c-t^c 
[0 2 7 2] *%w*^)iffl$n5^v-i'7yh{±. t/^t) 

f^);|>/^— V■:^;l'nyt^a — ^J-:-(^(i:. PDA (Personal Di 
gital Assistants) . f-m^WiEt 

[0 2 7 3] -51cDSflII^y7h'^x7(cJ;'3^!T$-ti: 

i)\ #fflO/N-F'>x7tfi^)iiiSn-rv^5nyi:^a- 
^i. ^iM©:^D^vi^«-ryxh-;I/-r§ci: 

/^-y:^;I/ayi^a-^*H{i:. *>y h7-^^IBiiji 
i**^?>-i'yxh-;i'?n5o 

[0 2 7 4] CtDiail^l^tix EI2JC^$n§^9ti:. 

fcga^^ns. T^p^^'^A^i^iBii^nTt/^s^^rVx 

^4 1 (7n-yt!x^'X^^^Cf) . )tr-i'X^7 4 2 

(CD-ROM (Compact Disk - ReadOnly Memory) , DVD (Digit 
al Versatile Disk)^$tJ) > 7^^^r-i'X^4 3 (M 
D (Mini-Disk) ^^t?) > tL<tt¥#f*^^rU4 4 

^ H j; D ^ § ^ ^ ^y - p< tV 7 i D * n 5 f£(t 

#^$n?i. 7n^^'^A*^f2il$nTl/^5R0M2 2-^. IB 
1tg|52 8{C#$n5/N-K'rVX^^H-r?«|jic$n?i„ 
[0 2 7 5] ^^b\ *B^ffl*tCfcV^T, 3B^|g|*tcfBiS 
$ tis y o i''^ i^^lB^il- § Xr -y 7t±> IBS^ nfcHi 
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[0 2 7 6] t/c. ■t^aVf-^icrn'Mt^mmm^ii 



[0 7] 0 6(DXr'y7°S 4 3 (D^-T-tyXBitiMacD 
[H9] 0 1 cD^^-by7,'9--/^cD^'i'-byXSi#^Ojni 

[H 1 0] menxTy-fs 4 stc^ott^^-r-tyxM 



^mm<DV7.hmim-sn. ^-r-tyxtc, ^©^-r-b [ai e] ^mt^-yoy^mm^mmt^m'^'h 

■rSck^tcbTt^t/^ uco^^Tii. ayf-y^yic^ [H i 7] W^{b^-7P-y^©7:i— v>y h(Dfi^J^ziN 

-tryx^^ts-r§'tf$Sf-fe^p, ^^-tryxfc-^f [01 s] w?Wb+-7p>y^<D^r^cD<i^^ifiB^-r5 

s-rs'iffSTfeD. ^-r-feyx I Da^-r-byx^-ic [ia 1 9] mm^^^rc::iy7-y'y(^m^fm^mmt 

(Dpyr>'>yfi:«|S:<D7-r-t>'X^mWJ5c:i:*"SRr [02 0] ^mt^~-ftiy^(Dm^7j^irmr'$>^o 

micfjir), yy(-tyx(Dm7^mmcnocti}^T^ [02 n ^ist«py-ry^yc>io(r)x/wxicwr5 

[0 2 7 8] S/c, *0i5lfflt(i::j3l/>T. v^Xf-Atti. [02 2] •7'l'-tyX©:^7"dr'J ^^WTSKT'SSo 

^tlitcDSH{Ccl;>)«fi!ttn5SS^»^«-r«.<0T'S [02 3] ^vYT^ hOU tfy^ja9^iJjBfl-rs7 

30 P-^-^-hT-SiK, 

[0 2 7 9] [02 4] ^^-'^-•^-'XDmi^^Mmt^mX'h 

ifl^m. ^-r-lryx-y— A. MtMc7p^^'^AtcJ:n C025] ay7-y'y(Dyt--^y h(om^7ntmvs> 

gijji^'T-tryxjSrBjff-rs^ iiT-pyry^y^fijfflT-t [02 6] <i^mfmmw<om^7r^tm-eh^o 

^^^icbrcctx\ ayTyy<Dmm^mf^!itrj: mzii z^yf-y^miwrnntrnx^^o 

<. mim^umu mm^immo^mm^t^ntti^ [028] ^^^7yv(Duy-ry'y(D^xy'>7'yh 

[01] *fg0^^jifflb/ipyxy^yS#^v'XxA<D^ 40 l^iB^-r^0"CfeSc 

m^.tf^y^mX'&^o [03 0] ^%{b+-7P-y^cDffifi)c^iJ^;]^-r0-efe 

[0 2] 0lcD^7-<'ryh<Dm^^1"7'P>y^0T So 

[03 1] V-i7(D^^;^|Ji0a-r;50-e$.?,o 

[03] 0 1 cD^/^-rry hcDpyry^y©^«"'i7yp- [03 2] ^^-rry ho^-r^^yxRv^ajojiaa^ii 

FJ!ia^iJiBfl-r-57P-^-^-h-e^§o 0^-rS7P-f--V-h-r-fe§o 

[04] 0 1 (Duyy'yy'^-AoyziyT-yym^^m C03 3] ^-r-feyx-9— /^tD^^r-feyxHi/^BftJMa 

^liiB^tS7P-9'i'-hT-fe5o ^UJB^TS7P-^-V-hT^§. 

[05] 04(DXr77S 2 6{Ct3tt§7:t-V7 h« [03 4] •7-^O#^m^^t0•^•$)?>o 

m^Tntmxh^o [03 5] ^'7^7yKoiEBMc»ssi5[ia«ri}j0fl-r5 

[06] 0icDi7v'r7yhcDpy7'y^yS45aa^^ so yti~=f-^r~hx^?>o 



[011] 0ico^-r-feyx-9— /N'O^-f-byXMir^n! 



y r y ^y co?iJffl ^ -tr y X^&ittSt 5 'IffST-fe 

0 . ife 5 ^ -t y x^)^"^ijffl nj-r § p y f - y ^y 



[0 13] ^f-dv /~¥^mmtmxh^o 
[01 4] y-Ft7-vwx®MJScDfl:f*^j%^-r0T 
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